A

ai-safety

10 hands-on demos for agentic AI security: blind verification, AIBOM, eval invariants, authority confinement, recon/malware/LFI/SSRF/scan — offline only.

Two independent keys must turn before an AI agent can act. JSON policy-based enforcement, LLM-based judge, short-lived token for tool access. Apache-2.0 concept package.

Local-first provenance workflows: browser file attestation and an evidence-bounded AI runtime.

Deliberate AI architecture — local-first tiered inference router with foreman oversight, deliberation gates, and cloud fallback. Built by Veteranet (DVBE) for privacy-preserving AI in homeless veteran services.

A small, transparent experiment testing whether language models distinguish solvable prompts from prompts containing missing or contradictory information, and whether their stated confidence tracks correctness

Open standard for geometric multi-agent AI safety. One decorator. Five-layer defense. 27 C4 cognitive states. 16 AoC failure modes blocked. pip install c4-protocol. Apache 2.0.

Production AI defense with 7-layer protection: mathematical constraints, object-capability access, distributed O2 consensus, SVETILO ethics. First open-source ThoughtVirus defense. BSL 1.1.

Empirical validation of C4 geometric defense against 16 Agents of Chaos. 550 adversarial prompts. 4 defense systems. 96.7% block rate. LLM validation on GPT-4o-mini + Mistral 7B. MIT.

Kevlar Benchmark: OWASP Top 10 for Agentic Apps (AI-Agents) 2026 a Red Team Benchmark.

A deterministic verification layer for AI systems. QWED verifies AI outputs using mathematics, symbolic reasoning, and formal methods (Z3, SMT, SymPy), creating an auditable trust boundary for agentic AI. Not generation. Verification.

A skill for AI coding agents that scaffolds a safe, multi-model chatbot for Telegram or Discord. Supports Claude, GPT, Gemini, and OpenAI-compatible backends. Nine safety layers on by default. Named for R. Daneel Olivaw from Asimov.

Pre-send verification for outbound agents — multi-axis guardian (deterministic + semantic) sitting in front of send(). Reference impl from Workloft Labs Note №05.