From d5a1e05625623129dc1c81a74948ecab51431ed1 Mon Sep 17 00:00:00 2001 From: James Toole Date: Tue, 14 Jul 2026 10:22:51 -0400 Subject: [PATCH] Add actionproof and agent-intent-ledger to Provenance, Instrumentation & Observability --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 7f85684..a9873cd 100644 --- a/README.md +++ b/README.md @@ -136,6 +136,8 @@ Projects that instrument agents for security observability, which could be usefu | [Virtual MCP Server (Stacklok)](https://dev.to/stacklok/introducing-virtual-mcp-server-unified-gateway-for-multi-mcp-workflows-17ee) | MCP, provenance | Stacklok's unified gateway multiplexing multiple MCP servers with centralized policy and provenance verification via toolhive. | | [Agent Governance Toolkit](https://github.com/microsoft/agent-governance-toolkit) | policy, OPA, Cedar, SPIFFE, SRE | Microsoft's runtime governance framework with deterministic policy enforcement (OPA/Rego + Cedar), Ed25519/SPIFFE agent identity, trust scoring, SRE tooling (SLOs, error budgets, chaos), and full OWASP Agentic Top 10 coverage. Multi-language (Python, TypeScript, .NET). See also [LIMITATIONS.md](https://github.com/microsoft/agent-governance-toolkit/blob/main/docs/LIMITATIONS.md). | | [micromize](https://github.com/micromize-dev/micromize) | eBPF, BPF-LSM, IMA, execution-integrity, Kubernetes | BPF-LSM enforcement of container boundaries built on [Inspektor Gadget](https://github.com/inspektor-gadget/inspektor-gadget). Execution integrity via SBOM + runtime binary hash validation using `bpf_ima_file_hash`. | +| [actionproof](https://github.com/selfradiance/actionproof) | policy, pre-execution, deterministic | Local deterministic allow/deny gate evaluating JSON intent for credentialed side-effecting agent requests (send_email, form_submit, pay_invoice) before execution, emitting a machine-readable decision artifact. No LLM in the critical path. | +| [agent-intent-ledger](https://github.com/selfradiance/agent-intent-ledger) | provenance, drift, receipts | Local deterministic CLI recording a human-request → agent-plan → proposed-action chain and flagging objective, authority, resource, and scope drift, emitting a JSON receipt. | ## Secrets Management & Isolation