Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.
Offline Ed25519 verification of signed receipts, bundles, and trust artifacts.