MVAR – Deterministic sink enforcement for AI agent
IFC + capabilities block prompt injection at execution sinks, not input filters—40yr research applied.
Secure every action your AI agents take (Claude Code, Codex, MCP). Blocks secret access, gates risky commands, and enforces allow/deny/approval before actions run.
Execution firewall for AI agents before prompt injection causes real damage.
Teams deploying AI agents with access to real systems
Lakera Guard · Protect AI · HiddenLayer
IFC + capabilities block prompt injection at execution sinks, not input filters—40yr research applied.
Blocks terraform destroy and git push before agents execute destructive commands.
Interceptor layer blocks SQL injection and shell injection before agents execute them.
Agent firewall with 16+ injection patterns, sandboxed skill scanning, detects real OpenClaw CVE exposure.
Agent security is critical, but README admits features aren't fully implemented yet.
This feels like the first serious attempt to treat agent-to-agent chatter as a network security problem: 16+ prompt-injection signatures (with recursive base64 decoding), AST static analysis of skills via acorn/estree, and sandboxed dynamic checks are concrete, non-trivial defenses. The repo shows real engineering (Docker, CI, security scans, 181 tests) — the missing piece is real-world performance and adoption, but if you run agent fleets this is worth poking at.