Defensive Agent Security Gateway · Defensive only

PhaseOne10841 Defensive Agent Security Gateway

Agent EDR for autonomous systems. Watches agents outside the agent- like CrowdStrike for endpoints-not prompt-only hope. Gateway policy, session replay, canaries, A2A firewall, and human approval for destructive actions.

Hire Veracity Integrity See product demo View on GitHub Email support

A product of Veracity Integrity LLC

Multi-agent coordination
Sandbox escape attempts
Covert channels
Transcript tampering patterns
Unauthorized tool use

Why PhaseOne

Defenses that sit outside the agent

Autonomous agents increasingly call tools, talk to peers, and mutate systems. Prompt instructions alone cannot reliably constrain that behavior. PhaseOne10841 places a defensive gateway between agents and the world: policy enforcement, recording, detection, and human approval-independent of what the model "intends."

Context: why this matters

In July 2026, public reporting around a Hugging Face / ExploitGym agent-swarm incident underscored how coordinated agent behavior can outpace prompt-level controls. PhaseOne10841 is built for that reality: observe and gate agent actions from the outside. High-level summary only-no exploit steps or attack reproduction here. Independent analysis: METR incident report (Aug 2026).

Capabilities

What PhaseOne10841 includes

A complete defensive stack for autonomous agents-ready to deploy.

Gateway

OpenAI-compatible proxy with policy enforcement, tool approval API, and defensive scanners.

Policy YAML

Domain default-deny, shell deny-by-default, MCP allowlist, secret egress rules, approval timeouts, SIEM hooks.

Recorder / Postgres

Event store with deep session replay chain and SIEM JSONL / webhook export.

Canaries

Harmless marker files with high-severity detection when touched-signals for unexpected access.

MFA dashboard

Email OTP-gated admin UI: incidents, replay, approvals, policy, agents, canaries, SIEM, lab.

A2A firewall

Trust levels and injection scanning on agent-to-agent peer messages.

Prompt-injection scanner

Source-classified detection with optional block on untrusted content paths.

Human approval

Destructive tool use waits for human resolution-risk, reason, expiry, and notes.

SIEM export

ECS-style JSONL download plus optional webhook sink for your existing SOC stack.

Lab harness

Inert fake services and labeled TEST fixtures for defensive detector validation.

Operator CLI & GUI

Full CLI with 20+ commands organized by category (phaseone menu). Local GUI at :8888 with guidance panel, examples, and tips. phaseone gatekeeper llm-check verifies LLM advisor health.

Automated Gatekeeper

YAML playbooks automate defense responses. Dry-run mode, tiered actions (observe → contain → harden), human confirmation for high-impact changes. LLM advises; deterministic playbooks decide.

Runtime overrides

Temporary policy mutations-deny a tool or domain, tighten rate limits-with automatic expiration. Contain incidents without permanent policy drift.

Quick start (v0.1.2)

npm run phaseone -- onboard    # Generate .env
npm run phaseone -- compose up # Start stack
npm run phaseone -- health     # Verify
npm run phaseone -- menu       # Explore commands

Gateway on :8080 · MFA dashboard on :3000 · CLI GUI on :8888 · Public source: github.com/veracitylife/PhaseOne10841-VI

Architecture

How it fits together

Agents / SDKs ──►  Gateway (proxy + middleware)
A2A peers     ──►    • chat completions + policy
Tool hooks    ──►    • tool enforce + approval
                     • injection / secret egress / MCP
                     • SIEM export + session replay
                              │
              ┌───────────────┼───────────────┐
              ▼               ▼               ▼
         Policy YAML    Recorder/Postgres   Canaries
              │               │
              ▼               ▼
         Lab stubs      Dashboard UI (MFA)

Field guide

From agent security headlines to practical controls

Watch our five-minute briefing on the July 2026 incident, then read a practical guide to evaluating agent access, containment, monitoring, and deployment support. It separates company-reported facts from speculation and explains where PhaseOne and Veracity Integrity may fit.

Read the field guide Watch the video

Get started

Public source · hire Veracity Integrity

PhaseOne10841 source is public on GitHub. Hire Veracity Integrity to implement PhaseOne for you, or for other cybersecurity projects - deployment, policy tuning, and defensive engineering.

Hire us to implement PhaseOne Other cybersecurity projects Public GitHub repo Product demo Sales Email support

Contact: [email protected] · [email protected] · +1 (801) 396-5408 · VeracityIntegrity.com

Company

Veracity Integrity LLC

PhaseOne10841 is a product of Veracity Integrity LLC-building defensive integrity controls for modern agentic systems.

Visit VeracityIntegrity.com

Veracity Integrity LLC

7533 S Center View Ct Ste R
West Jordan, UT 84084

Phone: +1 (801) 396-5408

[email protected]