hardenrun / aif
git clone https://github.com/hardenrun/aif.git
On device Firewall for Coding and Personal Agents
+43
stars, 24h · #893
+~212
stars, 7 days · #1,049
+~910
stars, 30 days · #914
1.7k
★ total · +14% this week
392
forks · 0 open issues
Star history (as recorded here)
License—
Created2026-08-01 (2mo ago)
Last push1mo ago
Watchers7
OwnerOrganization
Links
- GitHub: github.com/hardenrun/aif
- Homepage: https://harden.run/
- Releases · Issues · Hacker News mentions
README excerpt
# Harden.Run AIF (Agentic Integrity Foundation) The Harden AIF is a local system for coding agent safety. If AIF is useful to you please star this repo. ## Getting Started [code] Then: [code] ## Supported agents | Agent | Coverage | | --- | --- | | Claude Code | native hooks, pre-execution blocking | | Codex | native hooks, pre-execution blocking | | Cursor (IDE + CLI) | hooks, pre-execution blocking | | Gemini CLI | hooks, pre-execution blocking | | Kiro | hooks for the main agent; subagent MCP calls via proxy | | OpenClaw, Hermes | block-and-steer via a bridge process | See more at our trust page. ## Telemetry We never collect code, commands, file paths, prompts, or anything a secret could ride in. We collect anonymous operational counters only: version, OS/arch, adapters in use, decision/block counts. - `aif telemetry show` prints the exact payload before it is sent — a secret-safety tool inspecting its own egress. - Opt out with one environment variable: `AIF_NO_TELEMETRY=1`. For full schema see trust. ## Dashboard Use `aif show` to see the local dashboard at http://127.0.0.1:47391/ ## Contributing Raise an issue with this attachment [code] ## Reporting You can use these channels - Email **security@harden.run**, or - Open a private report via this repository's **Security → Report a vulnerability** (GitHub Security Advisories). Include the `aif doctor --bundle` output.