Transactional filesystem Git-style transactions with three-way merge, TOCTOU validation, and rollback

tar for node

Claude Code-style editing discipline for Pi — read-before-write, TOCTOU protection, bash steering, post-edit diagnostics, schema-error recovery

Continuous behavioral telemetry for AI agents. Drop in, stream tool calls + sessions to Armalo Trust Oracle. Closes the L4 TOCTOU gap.

Capability-style filesystem roots for Node.js apps that handle untrusted relative paths.

Sandbox-enforcing implementation of the DeepSeek Harness filesystem seam: fences write/edit by the per-call sandbox mode (read-only denies mutation, workspace-write contains it to the workspace + temp roots) while reads pass through

A drop-in fetch() that blocks SSRF: refuses loopback/private/link-local/CGNAT targets and pins the connection to the validated IP to defeat DNS rebinding (TOCTOU).

Fail-closed guard for AI agent tool calls — preflight contract changes before they execute. Security core frozen (agent-guard-api v1.0); v1.1 adds client-side enforcement: receipt→envelope binding, decision↔action reconciliation, safe_for_agent + degraded

Solana payment method for the MPP protocol

SSRF-safe egress fetch for Kumiko: a single egress(policy) entry point that enforces external/internal/tenant-supplied host policy, DNS-rebinding-safe resolve-then-pin, and no external runtime dependencies.

Searchable encryption for Node.js projects

Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)

Playwright-backed Service Provider for the dsh-browser capability seam.

SSRF protection: validate URLs, pin resolved IPs to the socket, eliminating the DNS-rebind window

Fork of Eric Wadkins' javascript implementation of schematron testing for C-CDA XML documents. This includes bug fixes and some house keeping.

Validated cross-store (@Resolve) references between TimescaleDB and another database.

Sandbox-enforcing implementation of the DeepSeek Harness filesystem seam: fences write/edit by the per-call sandbox mode (read-only denies mutation, workspace-write contains it to the workspace + temp roots) while reads pass through

Sandbox-enforcing implementation of the DeepSeek Harness filesystem seam: fences write/edit by the per-call sandbox mode (read-only denies mutation, workspace-write contains it to the workspace + temp roots) while reads pass through

ContextGuard CLI helpers for keeping AI coding agent context focused and local-first.

Execution-boundary command safety classifier for OpenCode's native Bash tool: static per-segment review plus a tool-enhanced OpenAI-compatible model reviewer.