Five Apache-2.0 packages that work alone and compose into one control plane:
- revoco — undo for AI-agent actions: the rollback is planned before the action runs, proven by drills, and a compromised grant's whole blast radius rolls back in one call
- retie — a terminal coding agent that classifies every action by how hard it is to undo
- mcp-gate — a policy firewall for MCP tool calls, with redaction on the wire
- veritrail — tamper-evident provenance: prove who authorized any agent action
- mnemosyne — a memory-integrity firewall for agents that remember
Start at agent-governance — the 60-second tour with measured numbers.