What can your AI agent do to the real world? Scan your code. See which tool calls have zero checks

Duc is a SQLite-based project-state format for physical-engineering work before execution.

Deterministic pre-execution gate for AI agents (fail-closed, YAML policy)

Open specification for pre-execution AI action authorization records

"Root orchestration & deployment hub for the TEOS Sovereign Security Mesh (9 modular layers)"

A production-grade pre-execution authority layer that binds AI agent identity to deterministic state. Standard IdPs (Entra ID, Okta, OIDC) issue passport to your Agent, predicate-authority issues/revokes "work permit" to your Agent based on intent & state

Core execution boundary engine (decision + proof + ledger)

Find blind spots before you build them. A multi-agent overnight research pattern for Claude Code that knows when not to run.

Pre-execution safety gate for AI agents. Evaluates proposed actions and returns allow, require_approval, revise_action, or block before execution.

Local deterministic CLI for detecting policy/source conflicts before proposed agent actions.

Deterministic pre-execution gate for one credentialed tool request: explicit policy, allow/deny decision, and inspectable decision artifact.

Implementation governed by the Aperture execution calculus

Transport-layer application profile for Execution Boundary Core Spec.

AI Execution Boundary Standard (AEBS) - Pre-incident reference for execution governance

The effect layer for AI-agent firewalls — simulate an action, get a canonical effect delta. Zero-dep, deterministic, fail-closed. 5 domains (fs, sql, shell, http, solana).

AI Code Safety Gate demo showing ALLOW, REQUIRE_APPROVAL, and BLOCK decisions for AI-generated code changes.

Entry point and architectural map for execution boundary research.

AI Admissibility Action: external controlled negotiation protocol (CNP) for automated and AI-driven actions. This gate decides whether execution may continue.

Execution-boundary gate interface. Contamination cases. Adversarial suite. Admissibility at execution time.