Featured project · Research prototype
AgentGuard-Chain
A prototype that supervises the tool calls of LLM agents. It places the security boundary after the agent emits a tool call and before the tool runs, auditing, scoring, blocking and logging file access, command execution, API calls and outbound actions, and it detects cross-step chains such as “read sensitive data → send externally”.
ImplementedSource: repository README, read on 28 Oct 2026
- Input risk labelling for prompt injection, jailbreak-style requests and suspicious context.
- Pre-execution review of file, command, API, message and email tool calls.
- Behaviour-chain detection for cross-step risks such as “read sensitive data → send externally” and “write script → run script”.
- Human confirmation with allow / ask / deny decisions; ask can auto-deny, auto-allow or prompt interactively.
- Agent emits a tool call
- Gateway review
- allow / ask / deny
- Run and redact
- Audit log
- Python
- Streamlit