Taint Tracking Python Packages

tessera-proxy

Contain the blast radius of a prompt injection — a provenance control plane for tool-using agents over MCP.

mcpkernel

The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint tracking, sandboxed execution, deterministic envelopes, and Sigstore audit. OWASP ASI 2026 compliant.

interbolt

Provenance-gated tool calls for AI agents. A local YAML+CEL policy gates each tool call on the provenance of its arguments. Deterministic, in-process, no model.

tessera-rs

Signed provenance labels and taint-tracking policy for LLM agent security. The core library behind AgentMesh.

polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

capability-reasoning-kernel

Make prompt injection structurally unable to cause an unauthorized effect — a Python reference implementation of the Reasoning Kernel (CaMeL-like) pattern.