Lilith-zero update: fast Rust security for agents
Transport-layer security for MCP agents stops exfiltration unlike prompt-based guardrails.

Macaroon-style tokens for AI agents solve the excessive agency problem better than prompt engineering.
AI engineers and security teams building autonomous agents
Open Policy Agent · HashiCorp Boundary · Macaroons.io
Transport-layer security for MCP agents stops exfiltration unlike prompt-based guardrails.
Rust CLI handles Nitro attestation docs so you don't have to parse them manually.
Seccomp+iptables+mount isolation blocks the ClawdHub credential stealer in practice.
It replaces real API keys with short proxy tokens (e.g. PROXY:openai) and uses an X-Upstream-Host allowlist to ensure containers can only hit approved endpoints — neat and low-friction. Comes as a tiny Rust CLI with init/secret set/start commands and clear SDK examples, so you can bolt it onto OpenClaw or Docker agents without adopting a full secrets vault.
Security-by-construction language for AI agents with Z3 contract verification.
OPA-based policy engine for AI agents blocking injection and tool abuse.