OxDeAI adds signed, fail-closed authorization before AI agents can act
docybo · reddit · 2026-07-21
OxDeAI is an open-source protocol that adds a deterministic authorization boundary before AI agents execute side effects.
- The core design separates decision from enforcement: an agent proposes intent, OxDeAI evaluates (intent, state, policy), and only then emits a signed AuthorizationV1 artifact.
- A guard verifies the artifact before any action runs, with fail-closed behavior, replay protection, trusted key sets, and offline-verifiable audit envelopes.
- The project already ships adapters for LangGraph, CrewAI, AutoGen, OpenAI Agents SDK, and OpenClaw.
- The author says cross-language reproducibility is complete for serialization and revocation-list surfaces, but not yet for every authorization verdict; no third-party security review has happened yet.
Related event: OxDeAI Open-Source Protocol Sets Execution Boundaries for AI Agents(2 posts)→
More from coding & agent
- SF 'Code Engineering' event picks up where 1,000-person harness engineering meetup left off — LangChain · 2026-10-27
- Prompt turns Claude Code into an iPhone backup forensics tool exposing 30-day 'deleted' photo copies — alex_verem · 2026-10-27
- Prompt turns Claude Code into a forensics tool finding deleted iPhone photos in backups — alex_verem · 2026-10-27
- Phones won't be mobile IDEs but control planes for agent fleets, argues Yuchen Jin — Yuchenj_UW · 2026-10-27
- FrontierCS 2 launches on Kaggle: 48 tasks make agents beat published CS papers — MeganRisdal · 2026-10-27
- Agent Field Kit launches $29 security runbooks for production AI agents — alvelda · 2026-10-27