Last released Nov 9, 2026
A rules engine between an AI agent and its tools, built assuming the model can be hijacked. Includes an MCP proxy.