Two products, each one self-hosted Go binary with no dependencies, under Apache-2.0:
- Quilzo — the control plane for AI agents and the content they produce: every agent gets an identity, a policy, a budget and a signed record, and a person approves the actions that matter · manual · quilzo.io
- Vaigil — open-source AI security operations: SIEM, SOAR and vulnerability management, with an AI analyst that suggests and never decides · manual
And five Apache-2.0 packages that work alone and compose into one control plane:
- revoco — undo for AI-agent actions: the rollback is planned before the action runs, proven by drills, and a compromised grant's whole blast radius rolls back in one call
- retie — a terminal coding agent that classifies every action by how hard it is to undo
- mcp-gate — a policy firewall for MCP tool calls, with redaction on the wire
- veritrail — tamper-evident provenance: prove who authorized any agent action
- mnemosyne — a memory-integrity firewall for agents that remember
Start at agent-governance — the 60-second tour with measured numbers.