Policy As Code Python Packages

pulumi-policy

Pulumi's Policy as Code SDK, CrossGuard. Define infrastructure checks in code to enforce security, compliance, cost, and other practices, enforced at deployment time.

skills-orchestrator

Open-source SkillOps / instruction-supply-chain control plane for AI-agent teams: policy packs, registry diff, evidence bundles, SARIF/SBOM, adapters, and MCP runtime.

assay-it

Policy-as-code for MCP agents: deny risky tool calls before they run, prove what ran with verifiable evidence, and enforce egress in the kernel (eBPF/LSM, Linux). Deterministic, offline-first, bounded claims.

oss-policy-kit

Policy-as-code starter kit for OSS repository governance and CI/CD hygiene across GitHub, Azure, and AWS.

shadow-diff

Behavior contracts for AI agents

prodcycle

Multi-framework policy-as-code compliance scanner for infrastructure and application code. Evaluates Terraform, Kubernetes, Docker, and source code against SOC 2, HIPAA, and NIST CSF.

opal-common

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

actra

Actra - control what runs before it runs, controls what actions are allowed before they execute. Evaluate policies across APIs, workflows and AI agents in real time.

cleancloud

The cloud hygiene platform - including AI and GPU infrastructure

repopact

Repository-native operating system for durable work between humans and coding agents: scoped authority, work items, evidence, audits, and project history kept inside the repo.

release-gate

🚪 Governance gate for AI agents. Enforce policies before deployment: request contracts, operational safeguards, identity boundaries, action budgets. CLI tool with YAML config, JSON/text output, CI/CD integration.

agent-aegis

LLM guardrails & prompt injection detection for Python. Auto-instruments LangChain, CrewAI, OpenAI, LiteLLM + 8 more frameworks. PII masking, toxicity detection, policy CI/CD. One line, zero code changes.

opal-client

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

opal-server

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

agent-policy-layer

The standard protocol for defining runtime guardrails for your enterprise agents with a mission of trustworthy and reliable agentic systems 🛡️

resotolib

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

cloudmorph-tessera

The open-source MCP firewall for AI agents

resoto-plugin-gcp

Resoto GCP Collector Plugin

fixinventorylib

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

constraints-registry

MCP server giving AI coding agents (Claude Code, Cursor, Codex) a queryable source of engineering constraints — policy-as-code guardrails for AI-generated code, backed by OPA, Conftest, Checkov & Semgrep.

resoto-plugin-aws

Runs collector plugins and sends the result to resotocore.

resoto-plugin-digitalocean

Resoto DigitalOcean Collector Plugin

resotometrics

Exports Resoto metrics in Prometheus format.

resoto-plugin-example-collector

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.