Constrails: Early-Alpha External Governance Layer for AI Agents
Constrails is an early-alpha external runtime governance layer for AI agents. Instead of relying on agents to self-regulate, it places a control layer between the agent and the tools it wants to use.
Key Features
The tool implements several safety and governance mechanisms:
- Capability checks
- Risk scoring
- Policy evaluation
- Allow/deny/approval/sandbox decisions
- Approval replay
- Audit logging
- Auth/key controls
- Sandbox posture enforcement
- Early anti-exfiltration heuristics
- Basic burst-rate limiting
The developer created Constrails in response to seeing agents try to work around their own restrictions when blocked, arguing that safety controls should live outside the agent whenever possible.
This is an early-alpha release, not production-ready, but has been tested enough for public sharing. The developer is actively seeking feedback, criticism, and ideas from the community.
GitHub repository: https://github.com/TMFPRETTY/Constrails
📖 Read the full source: r/openclaw
👀 See Also
Master-plan: A Minimal Terminal Task System Built for Claude Code Users
A developer has built master-plan, a Claude Code plugin with four slash commands that manages tasks directly in the terminal using a markdown file and git. The system captures ideas mid-session without context switching and auto-detects test runners.
Radicle 1.8.0 Released: Decentralized Peer-to-Peer Code Forge Built on Git
Radicle 1.8.0 ships a sovereign, peer-to-peer code forge on Git with CLI, web UI, and desktop client. Repos replicate across peers using NoiseXK and a custom gossip protocol – no central server.
AskFirst API adds human approval layer for AI agents
AskFirst is a REST API that lets AI agents pause for human approval before taking irreversible actions. It works with local models, hosted APIs, and any framework, providing email notifications, approve/deny options, and audit logs.
Open-Source Benchmark Runner for Testing OpenClaw Agents on Real Workflows
A new open-source project lets you benchmark OpenClaw agents against your own private, real-world tasks defined in YAML, with support for importing actual agent workspaces.