Skip to content

Add sofagent to Security, Sandbox & Permissions - #227

Open
KongFangXun wants to merge 3 commits into
ai-boost:mainfrom
KongFangXun:add-sofagent
Open

KongFangXun wants to merge 3 commits into
ai-boost:mainfrom
KongFangXun:add-sofagent

Conversation

@KongFangXun

@KongFangXun KongFangXun commented Aug 31, 2026 •

Copy link
Copy Markdown

Adds KongFangXun/sofagent to the Security, Sandbox & Permissions section (bottom of the list).

sofagent is an open-source FDE harness that constrains AI coding agents with ontology-driven workflows and commit-time auditing:

  • Addresses a specific harness problem: deterministic, code-level enforcement that sits outside the agent — every git diff is scanned by codified audit rules (secret leaks, out-of-scope edits, blind modifications without prior reads, commit-message prompt injection) before commit.
  • Tamper-evident audit trail: every change is recorded in an HMAC-signed local audit history; MCP tools expose the audit trail for governance aggregation.
  • Vendor-agnostic pattern: works with Claude Code, Codex, Cursor, OpenCode — any agent that produces git commits.

MIT licensed, TypeScript. Also listed in punkpeye/awesome-mcp-servers (merged via #13312) and Glama.

Single-line change to README.md only.

@KongFangXun

Copy link
Copy Markdown
Author

Friendly nudge — this one has been open for about a month now.

I've just refreshed the entry to match our current release (25 audit rules, previously stated as 24). The star badge at the end is a live shields.io badge, so it stays current on its own.

Happy to reword, trim it down, or move it to a different section if that fits the list better. Thanks for maintaining this one — it's the closest list to what we actually build.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant