information-flow-control
Contain the blast radius of a prompt injection — a provenance control plane for tool-using agents over MCP.
Deterministic execution boundary for AI agents. IFC enforcement at the sink. 5 frameworks. 50 attack vectors. Apache 2.0.
