Security●●Solid
I built a 0.07ms Python firewall to stop AI hallucinations
Deterministic policy gates beat LLM guardrails when your agent tries to DROP TABLE.
Solve My ProblemSlick
richardewing1
424mo ago
Back to browse
GitHub Repository
Checkout-free policy gate for AI-generated PRs: scope escapes, workflow privilege escalation, and agent-control-plane drift.
13 starsTypeScript
Agent Gate – a deterministic CI firewall for AI-generated PRs
by sjh9714·Jun 14, 2026·2 points·0 comments
AI Analysis
●●SolidBig BrainShip It
Deterministic CI firewall that blocks AI PRs without running untrusted code or calling LLMs.
Strengths
- •No checkout of PR code means untrusted agent changes can't escape the sandbox.
- •Catches workflow permission escalation and MCP config drift before merge.
- •Local replay fixtures enable deterministic demos without live GitHub access.
Weaknesses
- •Pre-release v0.1.0 with zero stars — unproven in real team workflows.
- •AI PR safety category will get crowded fast as agents become mainstream.
Category
Target Audience
Engineering teams using AI coding agents
Similar To
GitHub Branch Protection · Polaris · Semgrep
Similar Projects
Security●●Solid
Sentinel Core – A zero-telemetry enforcement gate for GitHub Actions
Hard-fail CI gate for GitHub Actions, but broader tools like Snyk, TruffleHog already integrate Actions scanning.
Niche GemSolve My Problem
EldorZ
115mo ago
Developer Tools●Mid
Agentic code review on PRs for less than $1/each
Agentic code review for $1, but static LLM reviewers already exist for free.
Bold BetSolve My Problem
JPHutchins
2015d ago
Security●●Solid
CargoWall – eBPF Firewall for GitHub Actions
eBPF firewall for GitHub Actions stops supply chain attacks at the kernel level.
Big BrainSolve My Problem
caleblloyd
1424mo ago
Security●●Solid
External admission gate for GitHub Actions before execution
External admission gate for GitHub Actions stops AI agents before they execute.
Big BrainBold Bet
pinfloyd
203mo ago
Developer Tools●●●Banger
Limits – Control layer for AI agents that take real actions
Wire-protocol interception means zero code changes; solves LLM control drift in production.
Solve My ProblemSlick
thesvp
925mo ago