From 67ac396f67aa9b29fa9c246fe7033f4c20fe6b99 Mon Sep 17 00:00:00 2001 From: ElamOlame31 <113931628+ElamOlame31@users.noreply.github.com> Date: Wed, 27 May 2026 21:35:25 -0400 Subject: [PATCH] =?UTF-8?q?Add=20AgentGate=20=E2=80=94=20pre-execution=20a?= =?UTF-8?q?uthorization=20PDP=20for=20agent=20harnesses?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/README.md b/README.md index d48db07..f0d72c1 100644 --- a/README.md +++ b/README.md @@ -195,6 +195,11 @@ Harness components organized by the problem they solve, not by vendor. ### Permissions & Authorization + +- **[AgentGate](https://github.com/ElamOlame31/agentgate-public)** - Pre-execution authorization PDP for AI agent harnesses. 4D trust scoring, 24h kill chain detection, Merkle audit trail. MIT licensed, drop-in with LangGraph. +https://www.tryagentgate.com/ + + - [Beyond Permission Prompts](https://www.anthropic.com/engineering/beyond-permission-prompts) — Structured authorization patterns for agents: how to give agents the right permissions without relying on prompt-level trust. - [OWASP LLM06:2025 — Excessive Agency](https://genai.owasp.org/llmrisk/llm062025-excessive-agency/) — OWASP's authoritative definition of the "excessive agency" risk: over-provisioned functions, unnecessary permissions, and missing approval mechanisms. The standard checklist for auditing harness permission scope against principle of least privilege. - [GitHub Enterprise — Governing Agents](https://wellarchitected.github.com/library/governance/recommendations/governing-agents/) — April 2026 GitHub official guide for enterprise agent governance: MCP server registry curation with ruleset-protected configurations, agent environment standardization via `copilot-setup-steps.yml`, ephemeral runner enforcement, and cloud-agent firewall allowlisting. The most concrete published reference for governing agent fleets at scale without creating bottlenecks. @@ -398,6 +403,12 @@ Real repositories worth studying — each with a note on *why* it's worth your t ## Security, Sandbox & Permissions + +- **[AgentGate](https://github.com/ElamOlame31/agentgate-public)** - Pre-execution authorization PDP for AI agent harnesses. 4D trust scoring, 24h kill chain detection, Merkle audit trail. MIT licensed, drop-in with LangGraph. +https://www.tryagentgate.com/ + + + - [Beyond Permission Prompts](https://www.anthropic.com/engineering/beyond-permission-prompts) — The authoritative resource on moving from prompt-level permission grants to structured authorization in the harness. - [Model Context Protocol — Authorization](https://modelcontextprotocol.io/specification/2025-11-05/basic/authorization) — MCP's specification for OAuth-based authorization flows when agents access external services. - [AI Harness Scorecard](https://github.com/anthropics/ai-harness-scorecard) — Scores repositories on AI harness safeguards. Useful checklist for auditing your own harness's security posture.