I build local-first tools for secure AI agents and integrations. I care about making permissions, tool actions and evidence understandable enough to review in a pull request.
- AgentProof — An experimental Agent Assurance Manifest, MCP configuration scanner, ten policy checks and a GitHub Action. Try the alpha or challenge the RFC with a synthetic case. Static checks are not a security certification.
- ScopeLens — Review whether granted GitHub App and MCP access matches an agent’s task, with a reproducible before/after demo.
- AgentReplay — Reproduce integration failures such as uncertain writes, duplicate actions and permission denials in a local test lab.
I welcome specific, reproducible feedback and synthetic fixtures. Each project documents its limits and has a contribution path.
Español: Desarrollo herramientas abiertas para revisar permisos, probar integraciones y mejorar la seguridad de agentes de IA. Si tienes un caso reproducible sin datos sensibles, me encantará estudiarlo.
