fail-closed

Evidence-first runtime for a wheeled mobile household robot with bounded actions, replayable events, and fail-closed verification.

Open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution.

Daemon-less OS security boundary & sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider)

Ubuntu NordVPN gateway with a LAN web panel, per-device policy routing, nftables NAT, and fail-closed routing for TVs, tablets, and other devices.

Deterministic execution authorization for AI agents and automation systems

Open-source authorization gateway for AI agent tool calls. Enforce allow, deny, and approval-required decisions before agents execute tools.

RPCShield is a static analysis tool to detect dependency relations (fail-close/fail-open) between microservices.

Systems language and runtime for explicit authority, typed distribution, and security-first process supervision.

deterministic governance layer for AI-assisted task execution

Seu agente. Sua máquina. Suas regras. — agente pessoal de IA 100% local, com supply chain provada (SLSA + SBOM + builds bit-a-bit reproduzíveis)

Policy-driven, fail-closed model routing for OpenClaw

A Windows-local, fail-closed supervisor for long-running AI work loops. Plant clock ≠ chat — chat is a mouth; the work clock is not the chat.

Local-first PySide6 prompt manager with versions, boards, clipboard modes, JSON export and a read-only Web/PWA companion.

🏛️ Deterministic rejection layer for computational legal claims. Verifies dates, amounts, and structured constraints; blocks unproven legal outputs.

Deterministic pre-execution gate for AI agents (fail-closed, YAML policy)

Cryptographic Harness for Uncensorable AI Agent Communication. Post-quantum verification architecture for autonomous AI agents. Fail-closed network policy. NTRU-Encrypt KEM at λ=128. 17/17 leaks fixed. The fence that holds.

Deterministic verification layer for AI-generated financial decisions. Verifies math (NPV, IRR, Black-Scholes, YTM, VaR), compliance (AML/KYC via Z3), and banking schemas (ISO 20022, SWIFT) — fail-closed, proof-backed. Not execution. Verification.

AXIOM Mesh 0.12.0-dev.3: local-first, fail-closed coordination substrate for human and machine principals, with policy-bound execution, cryptographic evidence, constrained-machine discovery and receipts, and governed runtime boundaries. No live deployment or production promotion claimed.

Five read-only AI review agents and a fail-closed PR gate — hunter/verifier twins in CI, philosopher counsel in design. Provider-agnostic: Claude-first with Codex/Gemini/Cursor lanes.

AuthContract turns institutional rules into developer-usable, testable controls. It connects authoritative rule sources to canonical contracts, CI/CD merge gates, runtime action checks, and reconstructable evidence—so teams can prove not just what an agent did, but which rule authorized it, what version applied, and why execution was allowed.