attenu-guard

Permissions that narrow when one AI agent delegates: a sub-agent never holds more than its parent. In-process, with a hash-chained audit log you verify offline. Python and TypeScript, adapters for 19 frameworks and A2A.

GitHub

Official source

Start locally with the CLI guide