Demo of Kafka integrated with Envoy proxy sidecars and SPIRE on K8s

Signed provenance labels and taint-tracking policy for LLM agent security. The core library behind AgentMesh.

IMM-CI Self-Assessment Tool — companion artifact to the IEEE SmartNets 2026 paper on Identity 3.0 and Zero Trust for critical infrastructure

Python SDK for AgentWrit — AI agent credential broker. Temporary, task-scoped tokens with automatic revocation. pip install agentwrit

Policy-as-code framework for governing heterogeneous API gateway estates (Kong, AWS, Envoy). Companion code for IEEE TEMSCON Global 2026 paper. 65 tests. SLSA pipeline. SPIFFE workload identity.

Open-source runtime governance for AI agents — prove what your agents do, not just what they say.

Comprehensive Solution Architecture: The Best of Both Worlds - Polyglot microservices with Hexagonal Architecture, SPIFFE/SPIRE zero-trust, gRPC/Protobuf, CDC, and AI/ML Intelligence Layer

Zero Trust MCP server protected with SPIFFE/SPIRE, strict mTLS, and identity-based RBAC.

Sovereign AI security control plane — SPIFFE/SPIRE identity, A2A proxy, MCP context, multi-model inference, intent screening, governance. Apache 2.0.

Zero Trust eXchange Protocol (ZTXP) — a vendor-neutral, cryptographically verifiable protocol for exchanging trust context across Zero Trust systems.

Weekly deep-dive reports on AWS — IAM/identity focused, automatically collected via GitHub Actions and published as a static site.

SPIFFE-style workload identity broker for AI agents. Short-lived JWT-SVIDs, audience binding, zero long-lived API keys. Zero-trust identity layer for agent fleets.

Experimental mesh networking, PQC transport, eBPF, and resilience tooling. Public branch is curated and demo-safe.

Zero Trust mTLS proof of concept for securing AI agent communication with SPIFFE/SPIRE.

Trust infrastructure for AI agents across organizations. Verified identity, explicit authorization, cryptographic audit trail.