provos/ironcurtain

Compiles plain-English constitutions into deterministic security policies enforced at runtime via semantic interposition on MCP tool calls. Supports two architectures: a V8-sandboxed builtin agent and Docker-containerized external agents (Claude Code, Goose) with MITM proxy mediation of LLM API calls and package installations. Every tool invocation is policy-checked independently—allowing, denying, or escalating to the user—ensuring the agent cannot escape restrictions through prompt injection or drift.

118 stars. Available on npm.