Preview. These maps are our reading of public sources and haven't been checked with the projects' maintainers yet.
JitPass
Mac app and CLI that finds plaintext secrets (.env, ~/.aws, shell history, MCP configs), moves them into a Touch ID vault, leaves decoys, and injects the real value just in time when you approve the named program.
jitpass.com/Active
v2.4.0 released 2026-10-03; repo pushed 2026-10-05; Show HN 55 points. (checked 2026-10-25)
In Agent guardrails
Where it stands apart
- How is the main thing licensed? copyleft or source-available with restrictions (10% of 21 others)
- How is it mainly sustained? individual side project, no revenue (25% of 20 others)
- Where does it mainly step in? in the agent's hooks or command path, just before a command runs (0% of 21 others)
- What mainly decides whether an action is allowed? a person approving in the moment (5% of 21 others)
- What is the main thing it protects? secrets and credentials (5% of 21 others)
What it shares with most of the community
- Is it actively maintained? active (81% of 21 others)
- Can it run entirely on your own device or infrastructure, without the maker's servers? yes (76% of 21 others)
- Do you need an account to use it? no account (67% of 21 others)
- Who is it for? developers (90% of 21 others)
- If the guard itself breaks, is missing, or cannot decide, what happens by default? fails closed: the action does not run (71% of 17 others)
- Which agents does it work with? any agent or process (not limited to a named list) (71% of 21 others)
- In the default setup, where does the agent's work actually execute? directly on the host machine, as usual (52% of 21 others)
- Does it control the agent's outbound network access? no (56% of 16 others)
- What is it mainly for? adding checkpoints, review, or evidence (52% of 21 others)
- Is enforcement kept out of the agent's reach? yes, enforced in code or infrastructure the agent cannot change (95% of 21 others)
Nearest neighbors
- Vultrino 71% of 17 shared answers match
- grith 65% of 17 shared answers match
- Noisegate 65% of 17 shared answers match
Every answer
| Question | Answer | Source |
|---|---|---|
| Is it actively maintained? | active | source 2026-10-25 |
| How is the main thing licensed? | stands apart copyleft or source-available with restrictions PolyForm Perimeter 1.0.0, source-available. | source 2026-10-25 |
| How is it mainly sustained? | stands apart individual side project, no revenue Solo maker (Meni Tasa); free for personal and internal company use; no pricing or paid tier found. | source 2026-10-26 |
| Can it run entirely on your own device or infrastructure, without the maker's servers? | yes | source 2026-10-25 |
| Do you need an account to use it? | no account Page says "No account, no telemetry"; local vault on your Mac. | source 2026-10-26 |
| Who is it for? | developers | source 2026-10-25 |
| Which shared standard or format does it mainly build on? | none of these (its own format or interface) Own vault and launcher. | source 2026-10-26 |
| Where does it mainly step in? | stands apart in the agent's hooks or command path, just before a command runs Intercepts the program reaching for a secret (shell/launcher level) rather than the agent's tool layer. | source 2026-10-25 |
| What mainly decides whether an action is allowed? | stands apart a person approving in the moment Touch ID prompt naming the program and what launched it. | source 2026-10-25 |
| If the guard itself breaks, is missing, or cannot decide, what happens by default? | fails closed: the action does not run Secrets are only released after approval; the separate shell-history hook fails open. | source 2026-10-25 |
| Which agents does it work with? | any agent or process (not limited to a named list) Any process, including agents. | source 2026-10-25 |
| In the default setup, where does the agent's work actually execute? | directly on the host machine, as usual | source 2026-10-25 |
| What is the main thing it protects? | stands apart secrets and credentials | source 2026-10-25 |
| Does it keep a record of agent actions? | yes, ordinary logs or a timeline Durable log of uses, unlocks, refusals and decoy reads. | source 2026-10-25 |
| Does it control the agent's outbound network access? | no | source 2026-10-25 |
| What is it mainly for? | adding checkpoints, review, or evidence | source 2026-10-25 |
| Is enforcement kept out of the agent's reach? | yes, enforced in code or infrastructure the agent cannot change | source 2026-10-25 |
Sources
This page was derived from:
- GitHub · github.com/jitpass/jit · read 2026-10-25
- GitHub · github.com/jitpass/jit/blob/main/LICENSE · read 2026-10-25
- Web page · jitpass.com/ · read 2026-10-25
Are you a maintainer? Claiming and correcting projects is coming soon.