Policy Python Packages

pulumi-policy

Pulumi's Policy as Code SDK, CrossGuard. Define infrastructure checks in code to enforce security, compliance, cost, and other practices, enforced at deployment time.

policyengine-uk

An open-source static tax-benefit microsimulation model for the UK.

opa-python-client

Python client for Open Policy Agent

regopy

A C++ interpreter for the OPA policy language Rego

kcl-lib

KCL Programming Language Core and API (CNCF Sandbox Project). https://kcl-lang.io

falcon-policy

Policy Middleware for Falcon APIs

openfisca-us

The PolicyEngine US Python package contains a rules engine of the US tax-benefit system, and microdata generation for microsimulation analysis.

lynx-agent

Policy-gated, durable, audited execution for AI agent tool calls. Every action gets a five-verdict policy check, a crash-safe checkpoint, and a tamper-evident audit event — a library, not a server.

casbin-redis-adapter

Redis adapter for PyCasbin

openfisca-uk

OpenFisca tax and benefit system for UK

rpsl-parser

An RFC 2622 conformant Routing Policy Specification Language (RPSL) parser with a focus on speed and correctness.

opal-common

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

ospac

OSPAC - Open Source Policy as Code

opal-client

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

mcp-zero-trust-layer

Open-source, self-hosted Zero Trust policy enforcement layer for MCP servers.

opal-server

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

flask-opa

Flask extension for OPA

typegraph

Declarative API development platform. Build backend components with WASM, Typescript and Python, no matter where and how your (legacy) systems are.

predicate-authority-sidecar

The work visa for AI agents. A high-performance Rust sidecar that deterministicly blocks unauthorized actions before execution.

capfence

Authorization gateway for AI agent side effects. CapFence lets agents propose tool calls, then enforces deterministic allow, deny, or approval decisions before shell, database, filesystem, payment, API, or MCP execution.

cape-privacy

Privacy transformations on Spark and Pandas dataframes backed by a simple policy language.

barebear

The free agentic AI course. 12 lessons, 12 concepts, real models. Read the framework — it's the textbook.

shadowaudit

Deprecated: ShadowAudit has been renamed to CapFence. Use the capfence package and https://github.com/capfencelabs/capfence.

tealtiger

TealTiger - AI agent security platform with guardrails, cost tracking, and policy management for LLM applications