Guardian open-sourced: deterministic ALLOW/ASK/DENY gate for every agent tool call, MCP server included
manofstyle04 · reddit · 2026-11-03
The author open-sourced Guardian, a deterministic gate between an agent and its tools: model output is treated as a proposal, never an action — every proposed action gets ALLOW, ASK (human approval), or DENY before executing.
Key designs:
- ALLOWs issue single-use cryptographic capability tokens instead of credentials
- Every decision produces a signed, hash-chained receipt
- @odingard/guardian-mcp is a stdio MCP server on the official registry; Claude Desktop/Cursor can route all tool calls through the gate with zero code
- SDK: npm i @odingard/guardian-sdk (Apache-2.0)
More from coding & agent
- Sergey Karayev's loop: Claude Code implements, a QA agent reviews, Claude iterates — sergeykarayev · 2026-11-03
- GitHub Copilot in Teams: @-mention it on an issue and it investigates, fixes, drafts a PR — WirelessLife · 2026-11-03
- Recursive GPT-5-Mini calls often beat a single GPT-5 call for less money — lateinteraction · 2026-11-03
- 20 open-source OCR and PDF extraction tools worth knowing in 2026 — MaryamMiradi · 2026-11-03
- Same Agent Reimplements Liquid in Rust vs C: Rust Uses 42% Fewer Tokens, C Runs 1.7x Faster — antirez · 2026-11-03
- Black October Attacks Show SBOMs Aren't Enough — Data and Credential Flows Are the Missing Half — aronchick · 2026-11-03