safe-agentic-world/nomos

Deny-wins policy hook for Claude Code and Codex. Checks every shell, file, and fetch call against rules you keep in Git, holds under --dangerously-skip-permissions, refuses commands it cannot parse, and keeps a hash-linked audit log.

3 best points · 2 comments · 3 Hacker News posts · 19 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: Solution for Prompt Injection of AI Agents (3 points, 0 comments, by prudhvinomos, 2026-03-27)
• Show HN: Stop your agent running Terraform destroy or Git push origin main (3 points, 0 comments, by prudhvinomos, 2026-03-31)
• Nomos – an execution firewall for AI agents (2 points, 2 comments, by prudhvinomos, 2026-03-24)