Envoy Proxy

Envoy Gateway is an open-source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. It uses Gateway API resources to dynamically provision and configure the managed Envoy proxies. In Kubernetes deployments, its custom resource definitions can be deployed separately when they are too large for Flux's chart Secret mechanism.

AgentConnect is an open-source, self-hostable platform that integrates autonomous AI agents (ACP agents such as Claude Code, Codex, and Gemini CLI) into communication platforms including Slack, Telegram, Discord, and GitHub. It provides tagging of agents and facilities to assign roles, tools, and memory so agents can act within those channels.

Istio is an open-source service mesh for integrating microservices, managing traffic, enforcing policies, and collecting telemetry with few or no service-code changes. Its control plane, Istiod, provides service discovery, configuration, and certificate management, while Envoy proxies handle service traffic and provide routing, circuit breaking, policy enforcement, and telemetry. In Ambient mesh mode, the Rust-based Ztunnel data-plane proxy provides secure connectivity and observability without sidecar proxies; the videos describe this mode as providing encrypted, mutually authenticated networking between agents and tools.

Agent-Safe Pipeline is a Decionis TypeScript library and runnable reference implementation for routing AI-agent actions through an independent authorization boundary. It captures an agent’s proposed action, target, and parameters as an immutable intent, sends the intent to a Decionis policy gate for an ALLOW, ESCALATE, or BLOCK decision, and coordinates verified human approval followed by policy re-evaluation for escalated actions. Agents cannot authorize their own actions, access downstream privileged credentials, or select trusted handlers. SafeExecutor accepts only the captured intent and decision, uses a sealed ActionRegistry to map action names to trusted handlers and validate parameters, and consumes a single-use grant bound to the intent before calling an API. The repository includes examples for Shopify refunds, GitHub deployments, procurement, and governed MCP tools, plus canonical-hash conformance vectors and architecture, threat-model, and security-evidence documentation. It is a self-hosted reference implementation rather than a hosted authorization service; its documented safety boundary also depends on provider-side identity, least privilege, network isolation, and incident response. The demos require Node.js 22.14 or later and pnpm 9.

AgentENV (AENV) is an open-source distributed platform developed by kvcache-ai for running agent environments at scale, including environments used for agentic reinforcement-learning training such as Kimi K3. It runs Firecracker microVM sandboxes across machines, loads OCI-compatible images on demand through overlaybd, and uses local disks as bounded caches for image and snapshot data. The aggregate image and snapshot footprint can exceed local disk capacity because cold data is evicted from the cache. Snapshot-backed environments can boot or resume in under 50 ms and pause in under 100 ms. AENV incrementally snapshots memory and filesystem changes, stores snapshots in S3-compatible object storage or a shared distributed filesystem, and can fork a running environment into independent sandboxes for parallel workflows. It uses ublk for I/O and memory ballooning to return reclaimable guest memory to hosts; the documentation reports a 9.6× memory overcommit ratio in production. The distribution includes an AENV server and the `aenv` command-line client for pulling OCI images as templates, starting, attaching to, executing commands in, pausing, resuming, and deleting sandboxes. It exposes an E2B-compatible HTTP API that works with the standard E2B Python and TypeScript SDKs. It requires Linux kernel 6.8 or later and `/dev/kvm` access for Firecracker execution. API requests are authenticated, but traffic is not encrypted; the documentation recommends a trusted network or HTTPS termination at a reverse proxy or load balancer.