6 projects
pantheon-ssrf-guard
A pinned-IP SSRF egress guard for Python's stdlib HTTP client. A DNS rebind cannot complete a handshake with an internal address.
pantheon-ical
Round-trip iCal (RFC 5545) read + write for booking/availability calendars, in under 200 lines.
pantheon-guardrails
Guardrails for LLM agents: conditional constitution scoring, PII redaction, crisis detection.
credit-ledger
Atomic, overdraft-proof, idempotent credit metering over Postgres. Extracted from PANTHEON.
pantheon-tool-sanitizer
Strip tool-protocol markup + Unicode smuggling (invisible/bidi/Tags-block) from untrusted MCP/LLM tool text. Covert-channel control, not a semantic-injection defence.
pantheon-rls
Tenant isolation as a Postgres guarantee — force-RLS + least-privilege grants, as reusable SQL.
