NVIDIA / OpenShell

OpenShell is a sandboxed runtime that enforces file, system call, and network policies on autonomous AI agents.

omnigent-ai / omnigent

Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.

NVlabs / RoboLab

A simulation benchmarking platform for evaluating generalist robot policies

OpenWAM-Official / OpenWAM

Official repository for "OpenWAM: An Open, Modular Exploration Towards Systematic World–Action Model Pretraining".

istio / istio

Connect, secure, control, and observe services.

cuga-project / cuga-agent

CUGA is an open-source generalist agent harness for the enterprise, supporting complex task execution on web and APIs, OpenAPI/MCP integrations, composable architecture, reasoning modes, and policy-aware features.

Mondo-Robotics / open-beni

OpenBeni browser robot racing with MuJoCo WebAssembly, ONNX policies and training source

cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

supabase / supabase-py

Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.

github / site-policy

Collaborative development on GitHub's site policies, procedures, and guidelines

roddhjav / apparmor.d

Full set of AppArmor policies

isaac-sim / IsaacLab-Arena

Isaac Lab - Arena is a robotics simulation framework that enhances NVIDIA Isaac Lab by providing a composable, scalable system for creating diverse simulation environments and evaluating robot learning policies. The framework enables developers to rapidly prototype and test robotic tasks with various robot embodiments, objects, and environments.

dulaiduwang003 / Pavise-Game

Open-source Windows game resource manager. Suppresses background processes, gives games exclusive CPU cores, steers device interrupts off game cores, applies per-game GPU driver, memory and power policies, and restores every change after play. No injection, no telemetry. GPL-3.0.

NVlabs / ENPIRE

ENPIRE is an agentic framework that allows AI coding agents to autonomously self-improve real-world robot policies through closed-loop physical trial, error, and evolution

jonathanhawkins / microduck-lab

Train RL policies for the Pollen Microduck 🦆 on an ordinary Mac, no CUDA GPU, and watch them learn live in the browser.

BrighterCommand / Fences

Fences is a .NET resilience and transient-fault-handling library that allows developers to express policies such as Retry, Circuit Breaker, Timeout, Bulkhead Isolation, and Fallback in a fluent and thread-safe manner.

App-vNext / Polly

Polly is a .NET resilience and transient-fault-handling library that allows developers to express policies such as Retry, Circuit Breaker, Timeout, Bulkhead Isolation, and Fallback in a fluent and thread-safe manner. From version 6.0.1, Polly targets .NET Standard 1.1 and 2.0+.

google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

terramate-io / terramate

Open-source Infrastructure as Code (IaC) orchestration platform: GitOps workflows, orchestration, code generation, observability, drift detection, asset management, policies, Slack notifications, and more. Integrates with Terraform, OpenTofu, Terragrunt, Kubernetes, GitHub Actions, GitLab CI/CD, BitBucket Pipelines, and any other CI/CD platform.

kubearmor / KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

ory / ladon

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

Micke-K / IntuneManagement

Copy, export, import, delete, document and compare policies and profiles in Intune and Azure with PowerShell script and WPF UI. Import ADMX files and registry settings with ADMX ingestion. View and edit PowerShell script.

ossf / allstar

GitHub App to set and enforce security policies

EvotecIT / GPOZaurr

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

simpler-env / SimplerEnv

Evaluating and reproducing real-world robot manipulation policies (e.g., RT-1, RT-1-X, Octo) in simulation under common setups (e.g., Google Robot, WidowX+Bridge) (CoRL 2024)

palantir / policy-bot

A GitHub App that enforces approval policies on pull requests

ChaoticSi1ence / SlimBrave-Neo

Debloat and harden Brave Browser on Linux, macOS, and Windows using Chromium enterprise policies. Curses TUI on Linux/macOS, native GUI on Windows. 79 policies, 6 presets, zero dependencies.

renniepak / CSPBypass

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.

Azure / Community-Policy

This repo is for Microsoft Azure customers and Microsoft teams to collaborate in making custom policies.

fynks / debrid-services-comparison

Compare leading debrid / multi-hoster services for pricing, host coverage, policies & tools.

chainloop-dev / chainloop

Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.

Azure / azure-sdk

This is the Azure SDK parent repository and mostly contains documentation around guidelines and policies as well as the releases for the various languages supported by the Azure SDK.

Corsinvest / cv4pve-autosnap

Automatic snapshot tool for Proxmox VE VMs and containers with retention policies

tosdr / browser-extensions

Browser extensions for Terms of Service; Didn't Read. “I have read and agree to the Terms” is the biggest lie on the web. We aim to fix that. Get informed instantly about websites' terms & privacy policies, with ratings and summaries from the www.tosdr.org initiative.

caura-ai / caura

Caura (formerly MemClaw) — governed shared memory for AI agent fleets. Multi-agent, multi-tenant, MCP-native. Trust tiers, keystone policies, audit trails, knowledge graph, self-improving retrieval. Apache 2.0.

kyverno / policies

Kyverno policies for security and best practices

strands-agents / box

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

joeynyc / awesome-microduck

A curated list of software, simulators, policies, agent tools and coverage for the Pollen Robotics / Hugging Face Microduck robot

solongate / agent-security

Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.

Niki9001 / purview-unified-sdk

Python SDK for Microsoft Purview Unified Catalog APIs, supporting data products, business domains, glossary terms, CDEs, relationships, OKRs, policies, and data quality automation.

Stellar-hush / hush

Open-source working beta for private email on Stellar: encrypted messages, sender-controlled inbox policies, optional postage, and verifiable delivery receipts.

rzc156 / dreamforge

Turn world-model imagination into corrective training data for robot policies — a single-GPU, falsifiable pipeline (SmolVLA · LIBERO · CEM · paired simulator replays).

ShadowSafin / Synapass

AI inference gateway and control plane for multi-provider routing, policies, caching, tools, and observability.

POInfra-AI / POInfra

Policy Optimization for Generative Models: diffusion and flow policies, online fine-tuning, and inference-time guidance and planning.

hexwander / joyctl

Xiaomi Joyose cloud control editor — visualize, edit & unlock game performance policies (fps limits, thermal tables, CPU baselines) synced via MCC cloud config. Tauri 2 + Rust + React.

varungiridhar / qplanning-code

Value-guided action selection and self-improvement for frozen behaviour-cloning policies

Vottivott / microduck-playground

Reproducible Microduck RL experiments, policies, simulation assets, and hardware add-ons

omarrayyann / FetchMan

Learning Visual Humanoid Loco-Manipulation Policies from Simulated Experiences

43081j / ai-policy

A collection of AI contribution policies which can be copied into other projects.

ilbertt / nibrunner

MicroVM orchestrator for your VPS with built-in sleep/wake policies, backups, snapshots, HTTPS, custom image, logs and metrics

webkubor / vite-plugin-refresh-guard

Vite 应用版本更新检测与刷新插件：静默刷新、提示后刷新或弹窗确认，支持 Vue/React。 / Vite version-check plugin with silent, prompted, or modal refresh policies and Vue/React adapters.

swirl-uk / BiGym2

BiGym 2.0: Benchmarking Learned and Agent-Developed Policies for Humanoid Household Manipulation (arXiv:2610.07594)

dogwood-policy / dogwood-local-engine

Implementation of an authorization engine for Dogwood policies

Grinffin / PhaseLoRA

Official implementation of PhaseLoRA: control-regime-conditioned low-rank adaptation for continuous-action vision-language-action policies, built on OpenPI.

cair-vinuni / vla.simd

A pure C++ inference engine for VLA policies on CPUs, with no GPU, CUDA, or ggml dependency. Built with its own tensors, operators, and SIMD kernels, the engine keeps kernels easy to inspect, tune, and replace.

AutoLab-SAI-SJTU / WAVE-0

Official repository of "WAVE-0: Bridging VLA Policies and WAMs with Lightweight Latent Future Prediction"

shellharbor / backfort

Backfort is a secure Linux backup and disaster recovery tool for files and Docker Compose. Create encrypted, compressed, verifiable backups with age, GPG, Minisign, rclone, S3-compatible storage, retention policies, database dumps, atomic publishing, safe restore, watchdog checks, and instant recovery workflows for servers.

boundary-bench / boundary-bench

BoundaryBench: benchmark coding-agent harnesses (Claude Code, Codex, Terminus 2, Grok) on Terminal-Bench tasks under hardened NIST-derived sandbox policies. Inspect AI + Harbor compatible.

JoeryVandenBosch / CISPolicyCreator

Create Intune policies from the CIS benchmark PDF files

NVlabs / alpasim

AlpaSim is an open-source autonomous vehicle simulation platform designed for development and testing of end-to-end AV policies