own-your-stack

own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prompt injection and destructive commands before they run; same call, same verdict, no model in the decision path. 100% recall / 100% precision on a 298-sample corpus, scored in CI against live rivals. Claude Code hook or MCP proxy.

Trajectory-level security monitor for AI agents: scores an action sequence against the job the agent was given and catches escapes assembled from steps a per-call guard already approved. Eight deterministic detectors, an optional local-model intent layer, seven harness adapters. Zero deps, read-only, out of band. Own Your Stack.

The open-source agent-security stack — redstamp + truecopy + strongroom — composed into one layered defense. Vet the tool, contain the call, give it a key it never holds. Related: plumbline, the out-of-band trajectory monitor. Part of Own Your Stack.

Own your agent secrets — your agent holds a scoped, single-use lease, never the raw API key. strongroom injects the real secret only at egress, so a leaked prompt or poisoned tool can't leak a credential. Encrypted vault · tamper-evident audit · zero deps · MCP. Part of Own Your Agent Security (redstamp · truecopy · strongroom) + plumbline.

own your agent skills — vet, sign & pin every skill & MCP server before it runs, then fail the build when the bytes change. 68,560 skills audited across two ecosystems; daily watch on the official Claude Code plugin directory.