Least Privilege Python Packages

velaris-lang

Run code an AI wrote without handing it everything you can reach. Each function declares what it may touch. You grant the run one folder, one host or a number of calls, and the runtime refuses anything else the moment it's tried.

agentmandate

What is your AI agent actually allowed to do? Finds limits an agent can slip past by combining individually permitted actions, and flags releases that widen its reach.

attenu-guard

Permissions that narrow when one AI agent delegates: a sub-agent never holds more than its parent. In-process, with a hash-chained audit log you verify offline. Python and TypeScript, adapters for 19 frameworks and A2A.

taper-broker

A credential broker for AI agents. The agent names a typed operation instead of holding a credential, and tokens narrow but never widen. Ed25519 capability chains, Postgres and SSH adapters, 231 red-team scenarios. Unaudited.

sabline-lang

Run code an AI wrote without handing it everything you can reach. Each function declares what it may touch. You grant the run one folder, one host or a number of calls, and the runtime refuses anything else the moment it's tried.

airlock-agent

Runtime firewall for AI coding agents. Gate every tool, MCP and skill call against a least-privilege policy.

attenu-derive

Attenu Derive: computes the permission set each AI agent task needs from the app itself — roster, tools, observed calls — for attenu-guard to enforce on every tool call and sub-agent handoff.

arbiter-client

Arbiter: A capability firewall between AI agents and services

aa-policy-validator

Validate all your Customer IAM Policies against AWS Access Analyzer - Policy Validation

subcheck

Decode and validate GitHub Actions OIDC token claims against an expected-claims policy - a CI gate against trust-policy drift

thorax

Git-native secrets management for humans, agents, and apps.

hubble-audit2policy

Generate least-privilege CiliumNetworkPolicy YAML from Hubble audit flows

arbiter-imap

Arbiter: A capability firewall between AI agents and services

arbiter-server

Arbiter: A capability firewall between AI agents and services

arbiter-smtp

Arbiter: A capability firewall between AI agents and services

arbiter-suite

Arbiter: A capability firewall between AI agents and services

agent-boundary-check

Verify what AI coding agents can actually read, write, execute and reach using synthetic canaries.

agentperms

Least-privilege permissions for AI agents and MCP tools. Record what your agent does, auto-generate a safe policy, and block dangerous tool calls before they happen.

iamarmor

IAM Policy Analyzer & Fixer

hsed

Unix chmod-inspired permission model for cryptographic operations

arbiter-skill

Arbiter: A capability firewall between AI agents and services

nhinsight

NHInsight — Open-source security tool to find risky non-human identities, tokens, and CI/CD access paths across AWS, Azure, GCP, GitHub, Kubernetes, and GitHub Actions.

steward-agent-governance

Open-source identity & access governance for AI agent fleets — effective-access analysis, segregation-of-duties, least-privilege enforcement, and a tamper-evident audit ledger.

web4-core

Web4: an open standard for verifiable AI presence — LCT identity, T3/V3 trust tensors, MRH context, ATP/ADP. Rust + Python SDKs on crates.io/PyPI. AGPL-3.0-or-later.