Capability Security Python Packages

nodus-lang

An orchestration DSL and embedded runtime for hosting agentic systems. Durable, inspectable workflows with deterministic step ordering, running in-process under a capability jail — the model lives in your host, not in the runtime. 30+ companion packages for memory, transport and governance.

portmark

Provider-neutral, capability-secured portable agent reference runtime: signed agent envelopes, host-enforced permits, Wasm capsule execution, and checkpoint-based migration.

capa-language

A capability-typed language that emits machine-verifiable supply-chain SBOMs by construction: per-function CycloneDX, SPDX, VEX and SLSA artefacts that match the code, not a scanner's guess.

signet-sign

Capability-based safety gates for LLM agents. The model proposes; signet authorizes.

interbolt

Blocks AI agent tool calls acting on untrusted data before they cause damage.

she-lang

A programming language that reads like English — and can't touch your machine unless you say so. Capability sandbox, pattern matching, gradual types. pip install she-lang

metaspace-membrane

A deterministic, deny-by-default safety membrane for machine-generated software. One .bio constitution, three membranes, two products. Patent pending.

nodus-container

An orchestration DSL and embedded runtime for hosting agentic systems. Durable, inspectable workflows with deterministic step ordering, running in-process under a capability jail — the model lives in your host, not in the runtime. 30+ companion packages for memory, transport and governance.

csc-runner

Bounded shell and CLI execution for AI agents: structured contracts, policy-gated execution, hardened Linux runtime enforcement, and signed receipts.