Preview. These maps are our reading of public sources and haven't been checked with the projects' maintainers yet.
Truth Firewall
Local gate that runs Codex on a task and only accepts its 'DONE' when user-defined acceptance checks pass, sending failures back for up to three attempts, else escalating to a person.
Repo created 2026-10-07; truth-firewall 0.1.0 on PyPI 2026-10-16; pushed 2026-10-18. (checked 2026-10-25)
In Agent guardrails
Where it stands apart
- How is it mainly sustained? individual side project, no revenue (25% of 20 others)
- Can it run entirely on your own device or infrastructure, without the maker's servers? partly (some features need the maker's servers) (14% of 21 others)
- Where does it mainly step in? outside the action path (inventory, records, or checks afterwards) (14% of 21 others)
- Which agents does it work with? one specific agent (19% of 21 others)
- What is the main thing it protects? the truth of the record (what the agent did or claimed) (10% of 21 others)
What it shares with most of the community
- Is it actively maintained? active (81% of 21 others)
- How is the main thing licensed? permissive open source (MIT/Apache/BSD) (67% of 21 others)
- Do you need an account to use it? no account (67% of 21 others)
- Who is it for? developers (90% of 21 others)
- What mainly decides whether an action is allowed? rules, policy, or boundaries written in advance (57% of 21 others)
- If the guard itself breaks, is missing, or cannot decide, what happens by default? fails closed: the action does not run (71% of 17 others)
- In the default setup, where does the agent's work actually execute? directly on the host machine, as usual (52% of 21 others)
- Does it control the agent's outbound network access? no (56% of 16 others)
- Is enforcement kept out of the agent's reach? yes, enforced in code or infrastructure the agent cannot change (95% of 21 others)
Nearest neighbors
- OpenAPPA 67% of 15 shared answers match
- Drop 59% of 17 shared answers match
- numbat (Perplexity) 59% of 17 shared answers match
Every answer
| Question | Answer | Source |
|---|---|---|
| Is it actively maintained? | active | source 2026-10-25 |
| How is the main thing licensed? | permissive open source (MIT/Apache/BSD) MIT | source 2026-10-25 |
| How is it mainly sustained? | stands apart individual side project, no revenue Personal GitHub repo, MIT, 4 stars; no sponsors or pricing. | source 2026-10-26 |
| Can it run entirely on your own device or infrastructure, without the maker's servers? | stands apart partly (some features need the maker's servers) Runs locally but drives hosted Codex. | source 2026-10-25 |
| Do you need an account to use it? | no account Local tool; no maker account. It drives Codex, which needs OpenAI sign-in separately. | source 2026-10-26 |
| Who is it for? | developers | source 2026-10-25 |
| Which shared standard or format does it mainly build on? | none of these (its own format or interface) Own gate around Codex. | source 2026-10-26 |
| Where does it mainly step in? | stands apart outside the action path (inventory, records, or checks afterwards) Checks the claim after the agent finishes. | source 2026-10-25 |
| What mainly decides whether an action is allowed? | rules, policy, or boundaries written in advance Deterministic checks (file_exists, python_function, black_box) written in advance. | source 2026-10-25 |
| If the guard itself breaks, is missing, or cannot decide, what happens by default? | fails closed: the action does not run Anything it cannot prove becomes HUMAN_REQUIRED, never VERIFIED_DONE. | source 2026-10-25 |
| Which agents does it work with? | stands apart one specific agent Codex (Windows-only pilot for real runs). | source 2026-10-25 |
| In the default setup, where does the agent's work actually execute? | directly on the host machine, as usual | source 2026-10-25 |
| What is the main thing it protects? | stands apart the truth of the record (what the agent did or claimed) | source 2026-10-25 |
| Does it keep a record of agent actions? | no, or not a focus Records a SHA-256 digest of the reviewed task, not an action log. | source 2026-10-25 |
| Does it control the agent's outbound network access? | no | source 2026-10-25 |
| What is it mainly for? | letting agents run with fewer approvals, safely 'Give Codex the task. Walk away.' | source 2026-10-25 |
| Is enforcement kept out of the agent's reach? | yes, enforced in code or infrastructure the agent cannot change Task digest detects edits to the checks. | source 2026-10-25 |
Sources
This page was derived from:
- GitHub · github.com/aldi949/truth-firewall · read 2026-10-25
RSS for this project · Its own release feed
Are you a maintainer? Claiming and correcting projects is coming soon.