deny-by-default
A governed sovereign agent kernel — make any local AI agent testify. Deny-by-default gate, macOS Seatbelt jail, tamper-evident hash-chained ledger, verifiable receipts. Apache-2.0, zero deps.
A deterministic, deny-by-default safety membrane for machine-generated software. One .bio constitution, three membranes, two products. Patent pending.
⚸ Lilith Zero - Security Middleware for MCP tool calls written in Rust.