generate .gitignore from gitignore.io API

Deny list dictionaries and config data for @stll/anonymize

External Tool Adapter for cargo-deny — wraps Rust dependency policy checks as an opensip-cli tool

Sandbox write/edit/bash to the project dir — prompt / deny / allow modes, configurable deny-with-redirect rules, per-session allow-deny memory

Create allow/deny matcher with Patterns, Regex and Functions

MCP proxy server that filters tools from upstream MCP servers via regex-based deny list

Deterministic PII detection and anonymization with regex, deny lists, and coreference resolution

Deny imports with full import trace support for Vite, Bun, Rollup, webpack, and esbuild

Typed risk classifier + thin policy (path guard, require-human, deny lists). No keyword-regex governance.

Zero-dependency, isomorphic HTML sanitizer: a fast browser-faithful WHATWG engine (deny-by-default) plus a drop-in sanitize-html-compatible legacy engine.

Rate limiting: token-bucket / fixed-window / sliding-window algorithms, deny list, sharding, pluggable stores, and procedure middleware

Deny-first typo-path model judge — a pi-permission-system Authorizer chain link

Agent Approve plugin for OpenCode - approve or deny AI agent tool calls from your iPhone and Apple Watch

Tool-policy evaluation for Xema agents — allow/deny rules governing tool usage.

Kengela pure authorization engine: scoped RBAC + org relation + deny-by-default PDP.

Agent Approve plugin for OpenClaw - approve or deny AI agent tool calls from your iPhone and Apple Watch

Deny-first Pi guardrails that keep LLM shell and file access safe, transparent, and user-approved.

Deny-by-default local stdio proxy and policy inspection CLI for MCP servers.

Declarative skill deck governance — cold pool, working set, deny-by-default

Dreamtree's reusable Authorization & RBAC-as-a-Service platform — multi-tenant RBAC, policy engine (deny-by-default, explicit-deny-overrides-allow), API keys, BYODB, and a CLI to bootstrap a client project.