OxDeAI adds signed, fail-closed authorization before AI agents can act
docybo · reddit · 2026-07-21
OxDeAI is an open-source protocol that adds a deterministic authorization boundary before AI agents execute side effects.
- The core design separates decision from enforcement: an agent proposes intent, OxDeAI evaluates (intent, state, policy), and only then emits a signed AuthorizationV1 artifact.
- A guard verifies the artifact before any action runs, with fail-closed behavior, replay protection, trusted key sets, and offline-verifiable audit envelopes.
- The project already ships adapters for LangGraph, CrewAI, AutoGen, OpenAI Agents SDK, and OpenClaw.
- The author says cross-language reproducibility is complete for serialization and revocation-list surfaces, but not yet for every authorization verdict; no third-party security review has happened yet.
Related event: OxDeAI Open-Source Protocol Sets Execution Boundaries for AI Agents(2 posts)→
More from coding & agent
- An MCP server signs every AI agent tool call into a verifiable Merkle chain — Funky_Chicken_22 · 2026-07-22
- Claude Code skill uses 10 Markdown rules to make outputs ADHD-friendly — alex_verem · 2026-07-22
- A Firecracker-based platform says it can host 6,000 AI agents on one 256 GB server — maritime_sh · 2026-07-22
- A better path to agent autonomy is running waves, finding friction, and iterating — JnBrymn · 2026-07-22
- AI agent designers map the visual and tonal cues behind companionship products — Unlikely-Platform-47 · 2026-07-22
- Coding agents are heading toward an AI-writes, AI-reviews, human-approves workflow — aftahi_ai · 2026-07-22