Astrid is a portable, capability-secure operating system for composable software.
-
Updated
Jul 18, 2026 - Rust
#
capability-security
Here are 70 public repositories matching this topic...
Sandboxed plugin VM with typed capabilities, deterministic replay, and time-travel debugging — written in Rust.
rust security vm bytecode sandbox rust-lang plugin-system capability-security capability-based-security wasm-alternative
-
Updated
May 15, 2026 - Rust
Jacquard is a small programming language designed for a regime in which most code is written by machine-learning models and reviewed by people.
programming-language algebraic-effects ocaml language-design probabilistic-programming content-addressing capability-security
-
Updated
Jul 19, 2026 - OCaml
Native Rust runtime for adversarial extension workloads with deterministic replay, cryptographic decision receipts, and fleet-scale containment.
rust typescript runtime incident-response sandboxing bayesian-inference javascript-runtime capability-security supply-chain-security deterministic-replay extension-runtime
-
Updated
Jul 18, 2026 - Rust
A scripting language for cowboy coders
-
Updated
Jun 1, 2024 - Scheme
plan-bound authorization architecture for governing privileged effects in untrusted computational agents.
ai kernel authorization sandboxing access-control computer-security system-security trusted-computing least-privilege capability-security trustworthy-ai kernel-security agentic-ai ai-saftey agentic-ai-safety
-
Updated
Jun 23, 2026
Electron runtime layer providing protocol-based separation, component assembly, and capability-based process control.
electron polyglot secure-by-default desktop-apps application-framework process-management component-based protocol-handler electron-framework modular-architecture capability-security desktop-runtime
-
Updated
Apr 20, 2026 - JavaScript
KAIROS-ARK is a high-performance, Rust-based Agent Runtime Kernel built for industrial-grade reliability. It delivers sub-100µs dispatch latency, event-sourced deterministic replay, and kernel-enforced capability sandboxing, bridging Python prototypes and production AI systems.
python rust scheduler rust-lang low-latency deterministic execution-engine ai-agents edge-ai capability-security system-level agent-runtime native-kernel replayable
-
Updated
Dec 21, 2025 - Rust
A ground-up Rust microkernel operating system exploring intent-centric computing, capability security, semantic knowledge, and privacy-first system architecture.
-
Updated
Jul 19, 2026 - Rust
A capability-native research kernel for explicit authority, isolated execution, temporal state, and verifiable system boundaries. It is particularly efficient with WebAssembly
rust security kernel webassembly wasm osdev jit operating-system sandboxing microkernel bare-metal formal-verification systems-programming zero-trust edge-computing wasm-runtime memory-safe capability-security rust-os
-
Updated
Jun 16, 2026 - Rust
A capability-centric programming language. Hand-written compiler in Python.
programming-language compiler static-analysis language-design vex type-system spdx cra sbom cyclonedx slsa capability-security supply-chain-security nis2 llm-security
-
Updated
Jul 19, 2026 - Python
Resource-safe, effect-typed programs in syntax you already know. A checked affine core with familiar Faces — JavaScript-, Python-, functional-, and pseudocode-shaped surfaces — compiling to typed WebAssembly.
programming-language webassembly language-design formal-verification multi-syntax-language type-systems capability-security resource-safety affine-types affinescript typed-wasm cs-education-research
-
Updated
Jul 19, 2026 - OCaml
The Estate's primary MCP server — GitHub, GitLab, and 115+ capability cartridges. Formally verified BoJ-server-ABI in Idris2 0.8.0 (%default total) with safety lemmas for credential isolation.
-
Updated
Jul 17, 2026 - JavaScript
my tinkering notebook (blog)
-
Updated
Jun 12, 2026 - Jupyter Notebook
A local, open-source capability gateway for AI agents — one AI-native self-describe endpoint so any agent can discover, understand, be granted, and call the software on your machine, under a trust model you can see, scope, and revoke.
macos typescript ai mcp gateway self-hosted authorization developer-tools codex ai-agents bun claude capability-security llm agentic
-
Updated
Jul 17, 2026 - TypeScript
JavaScript on genode using the Moddable XS engine
-
Updated
Aug 22, 2021 - Makefile
Provenance-gated tool calls for AI agents. A local YAML+CEL policy gates each tool call on the provenance of its arguments. Deterministic, in-process, no model.
ai-agents information-flow-control cel ai-security information-flow-tracking data-provenance policy-as-code taint-tracking capability-security llm prompt-injection llm-security tool-calling
-
Updated
Jul 18, 2026 - Python
The Kernel of CharlotteOS, An Experimental Modern Operating System
kernel x86-64 operating-system assembly-language system-programming aarch64 exokernel capability-security c23 monolithic-kernel
-
Updated
Aug 18, 2025 - C
Improve this page
Add a description, image, and links to the capability-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the capability-security topic, visit your repo's landing page and select "manage topics."