AI agent firewall that intercepts tool calls (file, shell, network) and enforces deterministic policies at sub-microsecond latency using CEL, IFC, secret scanning, and audit logging.

Troupe programming language

Mechanization of a noninterference proof for a toy imperative language with small-step semantics in Coq

Inter-procedural analysis framework and dependency/information-flow analysis for LLVM

JSFlow is a security-enhanced JavaScript interpreter for fine-grained tracking of information flow.

Ontology-based Customization and Visualization of Information Flow control in an Industry 4.0 scenario

P4Control: Line-Rate Cross-Host Attack Prevention via In-Network Information Flow Control Enabled by Programmable Switches and eBPF

A library for static information-flow control in Idris

My master thesis on information flow control on a minimal version of the RISC-V architecture with a model checker

Deterministic execution boundary for AI agents. IFC enforcement at the sink. 5 frameworks. 50 attack vectors. Apache 2.0.

A capability-typed language that emits machine-verifiable supply-chain SBOMs by construction: per-function CycloneDX, SPDX, VEX and SLSA artefacts that match the code, not a scanner's guess.

A SELinux configuration language that extends CIL with information flow requirements: semantics and verifier

Generates information-flow control mechanisms from a language's specification

A.C.E — Aegis Containment Engine. Auditable, layered AI containment. Assume breach. Contain egress. Measure everything. By Fratres X AI.

InFO is a policy language for regulating information flow control.

Shared protocol types, receipt signing, and verification for the vault family

Contain the blast radius of a prompt injection — a provenance control plane for tool-using agents over MCP.

Policy decision runtime for agent security, built on the agent-hooks control contract.

Odin - Zero Trust AI Agent. Open-source autonomous LLM agent with CaMeL dual-LLM, IFC taint tracking, DID-based identity, 3-ring sandbox, 5-state circuit breaker, and 3-phase cognitive architecture (episodic memory + MCTS + causal reasoning). Built by AgentLayers. MIT licensed.

Provenance-gated tool calls for AI agents. A local YAML+CEL policy gates each tool call on the provenance of its arguments. Deterministic, in-process, no model.