OxDeAI signs agent actions before execution to enforce fail-closed policy boundaries
docybo · reddit · 2026-07-21
OxDeAI
OxDeAI is an open-source protocol for deterministic pre-execution authorization in AI agents.
Core idea
Instead of checking policy inside the agent loop, the agent proposes an intent and OxDeAI deterministically evaluates (intent, state, policy). If it allows the action, it emits a signed AuthorizationV1 artifact that a guard verifies before any side effect can happen.
What exists today
- signed decision artifacts and a non-bypassable guard
- adapters for LangGraph, CrewAI, AutoGen, OpenAI Agents SDK, and OpenClaw
- single-hop scoped delegation
- cross-language conformance vectors for TS, Go, and Python
- hash-chained audit envelopes for offline verification
Honest caveats
- cross-language coverage is not complete for every verdict yet
- benchmark numbers are only indicative
- there is no third-party security review yet
- the protocol is still evolving
The author explicitly says this is not a prompt guardrail or monitoring tool; it enforces the execution boundary.
Related event: OxDeAI Open-Source Protocol Sets Execution Boundaries for AI Agents(2 posts)→
More from coding & agent
- Building a Secure AI Agent Gateway: Self-Hosting OAuth for Multiple SaaS Apps — Defiant_Cod_2654 · 2026-07-22
- Rowboat launches as an open-source, local-first AI coworker with memory — ycombinator · 2026-07-22
- Reddit user chains Ideogram 4 and Krea2 to mimic bbox-based image positioning — v3lh0t05c0 · 2026-07-22
- Apollo Cuts AI Assistant Skill Dev Time by 85% with Deep Agents — LangChain · 2026-07-22
- Scoble says AI “loops” really means long-running multi-agent workspaces — Scobleizer · 2026-07-22
- Kimi Code opens a waitlist as Moonshot rolls out its coding product — Fabulous_Bonus_8981 · 2026-07-22