grith

grith acts as an open-source supervisor for coding agents, operating at the operating system level to enhance security. Key capabilities include: * Intercepts security-relevant system calls before execution * Applies 18 distinct filters to score risky operations * Allows safe calls to proceed unhindered * Pauses ambiguous calls for human review * Denies dangerous calls to prevent system compromise This tool creates a critical security layer by sitting underneath various coding tools. It evaluates potential system effects at the syscall boundary, providing a robust defense against malicious actions such as poisoned dependencies or prompt injections. Every decision made is recorded, generating project-level analytics and verifiable audit records by project, tool, and session. grith requires no integration with your existing applications. Simply launch any coding agent through grith, and it automatically intercepts and reviews all security-relevant calls. This ensures that 'auto-approve' actions by agents are subject to an independent security assessment, reducing risks related to unauthorized file access, data exfiltration, or destructive operations. Designed for developers, security teams, and engineering organizations utilizing coding agents, grith provides essential oversight to maintain system integrity and confidentiality.