Justin0504/Aegis

Runtime policy enforcement for AI agents. Cryptographic audit trail, human-in-the-loop approvals, kill switch. Zero code changes.

What it solves

AEGIS is a pre-execution firewall for AI agents. It prevents agents from executing dangerous tool calls—such as destructive SQL queries, unauthorized file system access, or data exfiltration—by intercepting and classifying them in real-time before they are executed. It replaces the need for a human-in-the-loop for every action while providing a tamper-evident audit trail for compliance.

How it works

AEGIS sits between an AI agent and its tools using a lightweight SDK (available for Python, TypeScript, and Go). When an agent attempts a tool call, the request is sent to the AEGIS Gateway, which processes it through a five-stage pipeline:

  1. Classify: Identifies the tool type (e.g., database, shell, network) based on arguments.
  2. Anomaly: Detects deviations from the agent's historical behavior.
  3. Evaluate: Checks the call against JSON-Schema policies and injection detectors.
  4. Match DSL: Applies tenant-specific policy rules.
  5. Decide: Determines if the call should be allowed, blocked, or paused for human review.

If a call is marked as "pending," it appears in the Compliance Cockpit for a human operator to approve or reject. All actions are recorded in an RFC 6962-compliant Merkle transparency log.

Who it’s for

AEGIS is designed for developers and security teams deploying AI agents in production environments where safety, compliance (SOC 2, ISO 27001, EU AI Act), and risk management are critical.

Highlights

  • Pre-Execution Blocking: Stops high-risk actions before they happen rather than just logging them after the fact.
  • Compliance Cockpit: A centralized dashboard for real-time monitoring, forensic audit trails, and human-in-the-loop approvals.
  • Agent Threat Ontology: A versioned taxonomy of 40 agent-specific attack techniques (AAT-T*) with a coverage map to identify security gaps.
  • Tamper-Evident Logging: Uses a Merkle tree transparency log to provide offline-verifiable proof of audit records.
  • Zero-Config Instrumentation: Can be integrated into existing agents with a single line of code without changing the agent's internal logic.