sipyourdrink-ltd / bernstein

The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run

iflytek / skillhub

Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.

pgaudit / pgaudit

PostgreSQL Audit Extension

tirrenotechnologies / tirreno

tirreno is an open-source framework for building sovereign security, compliance and fraud prevention applications. Detect account takeovers, cyberfraud and business logic abuse inside your product.

ThinkWatchProject / ThinkWatch

Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII redaction and tool-call guards, rate limits, budgets, cost accounting and audit logs.

samvallad33 / vestige

Think before doing, prove before saving. Vestige is a local, deterministic safety kernel for AI agents. Every memory write and agent action is recorded in Strata, an append-only log, so you can see exactly what your agent did and why.

sandbaseai / sandbase-harness

Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.

tx7do / go-wind-admin

Enterprise admin platform in Go on go-kratos (Ent): Protobuf as the single API contract with full-stack codegen (Go APIs + TypeScript clients, one-click CRUD scaffolds), multi-tenant RBAC (Casbin / OPA / Zanzibar), TOTP MFA, 180-day audit logging aligned with China MLPS 2.0 (等保) — with Vue3 (Vben / Element Plus) and React 19 (Antd) frontends.

halofyai / halofy

Halofy is the open access and governance layer for AI agents across your organization. Identity, policy, provenance, audit, and signed erasure.

Cygnux-Labs / Tracekit

Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.

Bestpart-Irene / secondsign-core

The gate between an AI agent and real money. Runtime authorization for financial AI agents: structured intent, deterministic policy, human approval, execute-once gateway, tamper-evident receipts. Open core, Apache-2.0.

ahmetrende / database-queryhub

Run SQL on production databases with approval and a full audit. Users submit from Slack or a web IDE, and a DBA approves. QueryHub runs the approved query with a read, write or DDL login and masks personal data. PostgreSQL, SQL Server, ClickHouse and Athena.

useagenthq / threads

Agents you can inspect, replay and trust. An agent framework for TypeScript and Python, built on an append-only event log.

CTRLRun / ctrlrun

The execution safety layer for AI agents.

nutanix / ntnx-api-mcp-server

Nutanix Prism Central meets AI - an open-source MCP server exposing 1,000+ V4 API operations to AI assistants through natural language. Schemas resolved from your cluster's running PC version, not a generic latest. Read-only by default, audit-logged, air-gap supported. Technical Preview. Apache 2.0.