Project Summary
Lightweight SDK that makes agentic AI safer and more auditable.Before executing any tool call or side-effect action, the agent must propose a structured JSON contract declaring:
- explicit intent
- impact classification (read / write / money / irreversible / privacy / etc.)
- provenance sources with trust levels (untrusted → trusted via verification)
- claims backed by verifiable evidence (SHA-256 file hashes or Ed25519 signatures)
Verifier checks everything locally and fails closed if provenance doesn't match or high-impact actions lack trusted evidence.
Integrates easily as middleware (LangGraph tool-node wrapper) or via MCP for enterprise tool guarding.
In a Nutshell, pic-standard...
- ...
- ...
-
...
has a codebase with a very short history
maintained by a small development team
with stable Y-O-Y commits -
...
took an estimated 1 years of effort (COCOMO model)
starting with its first commit in January, 2026
ending with its most recent commit 7 days ago
Quick Reference
Apache License 2.0
Permitted
Commercial Use
Modify
Distribute
Place Warranty
Sub-License
Private Use
Use Patent Claims
Forbidden
Hold Liable
Use Trademarks
Required
Include Copyright
State Changes
Include License
Include Notice
These details are provided for information only. No information here is legal advice and should not be used as such.
Project Security
Vulnerabilities per Version ( last 10 releases )
There are no reported vulnerabilities
Project Vulnerability Report
Security Confidence Index
Vulnerability Exposure Index
Did You Know...
-
...
65% of companies leverage OSS to speed application development in 2016
-
...
search using multiple tags to find exactly what you need
-
...
use of OSS increased in 65% of companies in 2016
-
...
anyone with an Open Hub account can update a project's tags
30 Day SummaryJan 9 2026 — Feb 8 2026
|
12 Month SummaryFeb 8 2025 — Feb 8 2026
|
