Guardian
Named by 2 kept items in this workspace.
Search every workspace for Guardian. It matches the name as written, so it can find other things that share it.
The items that name it 2
Open-source (Apache-2.0) authorization layer from Odingard that returns a deterministic ALLOW, ASK or DENY decision for every action an AI agent proposes before it runs. It issues single-use capability tokens in place of credentials and signs receipts for every action. An MCP server is listed on the
The ACS Guardian Agent reference implementation that receives hook requests over HTTP (http://localhost:8787/acs) and returns allow/deny/modify/ask/defer decisions; logs envelopes to .acs/envelopes.jsonl and session context to .acs/session-context.jsonl.
All technologies in this workspace.