capability-security
Capability-based safety gates for LLM agents. The model proposes; signet authorizes.
Provenance-gated tool calls for AI agents. A local YAML+CEL policy gates each tool call on the provenance of its arguments. Deterministic, in-process, no model.
Reference runner for Command Scope Contract
