A Vite plugin that lets SPA applications generate a Content Security Policy (CSP).

Optional TypeScript-Go semantic refinement sidecar for Fallow

Official ESLint plugin for Vue.js

Policy and safety middleware for MCP servers — authorization, rate limits, confirmation gates, audit logging, and PII redaction.

User-approval seam (ctx.approval) for the DeepSeek Harness: one-shot permission decisions dispatched to composed answerers over the approval/request waterfall, fail-closed by default

Parse Content Security Policy directives.

ESLint plugin about ECMAScript syntactic features.

Typed risk classifier + thin policy (path guard, require-human, deny lists). No keyword-regex governance.

Additional ESLint rules for ESLint directive comments.

Semantic session durability checkpoints before model requests and tool side effects

Per-call sandbox policy resolver and current model context: deployment fallbacks plus each session's mode and workspace root, shared by every enforcing capability family

Stripe API wrapper

Build Content Security Policy directives.

A programming model for software-defined state

A framework for writing policy as code

Shared request-context types, builders, and policy condition generators — the canonical encoding of a request (HTTP, action, connection) into the shape the policy engine expects.

n8n community node for Zscaler AI Guard (AI Runtime Security) API integration

Middleware to set the Referrer-Policy HTTP header

Cloud executable protocol

Tool-result spill policy for the DeepSeek Harness — replaces oversized plain-text tool results with a retained preview plus a spill-file path (no service surface)