Astrid is a portable, capability-secure operating system for composable software.
-
Updated
Aug 7, 2026 - Rust
#
capability-security
Here are 96 public repositories matching this topic...
Jacquard is a small programming language designed for a regime in which most code is written by machine-learning models and reviewed by people.
programming-language algebraic-effects ocaml language-design probabilistic-programming content-addressing capability-security
-
Updated
Aug 10, 2026 - OCaml
An actor-based systems language that compiles to readable C. Native, no VM, no garbage collector.
language programming-language actors compiler actor-model concurrency systems-programming no-gc capability-security compiles-to-c
-
Updated
Aug 10, 2026 - C
Sandboxed plugin VM with typed capabilities, deterministic replay, and time-travel debugging — written in Rust.
rust security vm bytecode sandbox rust-lang plugin-system capability-security capability-based-security wasm-alternative
-
Updated
May 15, 2026 - Rust
SQL over RPC, safely
-
Updated
Aug 7, 2026 - TypeScript
Native Rust runtime for adversarial extension workloads with deterministic replay, cryptographic decision receipts, and fleet-scale containment.
rust typescript runtime incident-response sandboxing bayesian-inference javascript-runtime capability-security supply-chain-security deterministic-replay extension-runtime
-
Updated
Aug 10, 2026 - Rust
A scripting language for cowboy coders
-
Updated
Jun 1, 2024 - Scheme
plan-bound authorization architecture for governing privileged effects in untrusted computational agents.
ai kernel authorization sandboxing access-control computer-security system-security trusted-computing least-privilege capability-security trustworthy-ai kernel-security agentic-ai ai-saftey agentic-ai-safety
-
Updated
Jun 23, 2026
Electron runtime layer providing protocol-based separation, component assembly, and capability-based process control.
electron polyglot secure-by-default desktop-apps application-framework process-management component-based protocol-handler electron-framework modular-architecture capability-security desktop-runtime
-
Updated
Apr 20, 2026 - JavaScript
A ground-up Rust microkernel operating system exploring intent-centric computing, capability security, semantic knowledge, and privacy-first system architecture.
-
Updated
Aug 5, 2026 - Rust
A statically-typed scripting language and bytecode VM for sandboxed execution of AI-generated code, built in C++ with no GC or JIT.
sandbox scripting-language programming-languages compilers cpp17 virtual-machines embedded-scripting-language bytecode-compiler ai-agents sandbox-environment compiler-backend capability-security programming-language-design
-
Updated
Aug 8, 2026 - C++
KAIROS-ARK is a high-performance, Rust-based Agent Runtime Kernel built for industrial-grade reliability. It delivers sub-100µs dispatch latency, event-sourced deterministic replay, and kernel-enforced capability sandboxing, bridging Python prototypes and production AI systems.
python rust scheduler rust-lang low-latency deterministic execution-engine ai-agents edge-ai capability-security system-level agent-runtime native-kernel replayable
-
Updated
Dec 21, 2025 - Rust
Agent-first display server: a small trusted core speaking a capability-native protocol, with every legacy app confined to its own per-app shim. Humans and AI agents operate the same GUIs under revocable, capability-scoped authorization.
rust security compositor wayland display-server ai-agents wlroots capability-security smithay agent-infrastructure
-
Updated
Aug 10, 2026 - Rust
Resource-safe, effect-typed programs in syntax you already know. A checked affine core with familiar Faces — JavaScript-, Python-, functional-, and pseudocode-shaped surfaces — compiling to typed WebAssembly.
programming-language webassembly language-design formal-verification multi-syntax-language type-systems capability-security resource-safety affine-types affinescript typed-wasm cs-education-research
-
Updated
Aug 8, 2026 - OCaml
One MCP stdio endpoint for a whole toolchain — GitHub, GitLab, cloud, mail, browser and research tools — with capability-gated dispatch, a machine-checked ABI, and cartridges fetched on demand from boj-server-cartridges. Zero runtime dependencies.
ffi formal-verification multi-agent-systems plugin-architecture ai-agents capability-security supply-chain-security model-context-protocol mcp-server
-
Updated
Aug 7, 2026 - JavaScript
A capability-typed language that emits machine-verifiable supply-chain SBOMs by construction: per-function CycloneDX, SPDX, VEX and SLSA artefacts that match the code, not a scanner's guess.
programming-language compiler static-analysis webassembly language-design vex type-system spdx cra information-flow-control sbom cyclonedx slsa capability-security supply-chain-security nis2 llm-security
-
Updated
Aug 10, 2026 - Python
my tinkering notebook (blog)
-
Updated
Aug 8, 2026 - Jupyter Notebook
A capability-native research kernel for explicit authority, isolated execution, temporal state, and verifiable system boundaries. It is particularly efficient with WebAssembly
rust security kernel webassembly wasm osdev jit operating-system sandboxing microkernel bare-metal formal-verification systems-programming zero-trust edge-computing wasm-runtime memory-safe capability-security rust-os
-
Updated
Jun 16, 2026 - Rust
Canonical registry of BoJ capability cartridges — each one a machine-checked ABI, a five-symbol C-ABI implementation and a loopback adapter, minted from a single template. Hosts (boj-server, panll) fetch from here on demand.
mcp monorepo formal-verification ai-agents plugin-registry c-abi capability-security model-context-protocol
-
Updated
Aug 7, 2026 - Zig
Improve this page
Add a description, image, and links to the capability-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the capability-security topic, visit your repo's landing page and select "manage topics."