deterministic-policy
MVAR: Information Flow Control for LLM Agent Runtimes — Deterministic prompt injection defense via dual-lattice IFC with cryptographic provenance. Built on 40 years of IFC research (FIDES, Jif, FlowCaml). Apache 2.0 licensed.