OpenAPPA

Open Policy Agent (OPA) is an open-source, general-purpose policy engine and graduated Cloud Native Computing Foundation project. It uses the declarative Rego language to define rules and evaluates supplied policies and data in response to queries, returning decisions such as whether an API request is allowed, what cluster a workload may target, or which resource tags are required. Services can integrate with OPA through its Go SDK, Go API, REST API, or other documented integrations; OPA is also available as a CLI, container image, and binary. The videos specifically describe its use for Kubernetes admission policies and command-line validation before resources reach a cluster.

Agent-Safe Pipeline is a Decionis TypeScript library and runnable reference implementation for routing AI-agent actions through an independent authorization boundary. It captures an agent’s proposed action, target, and parameters as an immutable intent, sends the intent to a Decionis policy gate for an ALLOW, ESCALATE, or BLOCK decision, and coordinates verified human approval followed by policy re-evaluation for escalated actions. Agents cannot authorize their own actions, access downstream privileged credentials, or select trusted handlers. SafeExecutor accepts only the captured intent and decision, uses a sealed ActionRegistry to map action names to trusted handlers and validate parameters, and consumes a single-use grant bound to the intent before calling an API. The repository includes examples for Shopify refunds, GitHub deployments, procurement, and governed MCP tools, plus canonical-hash conformance vectors and architecture, threat-model, and security-evidence documentation. It is a self-hosted reference implementation rather than a hosted authorization service; its documented safety boundary also depends on provider-side identity, least privilege, network isolation, and incident response. The demos require Node.js 22.14 or later and pnpm 9.

AgentOps is an open-source observability and developer-tools platform for building, evaluating, and monitoring AI agents. Its Python SDK records agent sessions and LLM calls for dashboard-based session replays, step-by-step execution graphs, debugging, analytics, cost tracking, and benchmarking. Developers instrument code with decorators for sessions, agents, operations, tasks, and workflows; these support nested span hierarchies, input and output recording, exception handling, asynchronous functions, generators, and custom attributes. The SDK provides integrations with agent frameworks and LLM systems including CrewAI, AG2/AutoGen, Agno, LangGraph, and the OpenAI Agents SDK, and the platform can be self-hosted with its dashboard and API backend. The app is released under the MIT license.

agentacct is a local-first audit and observability tool for coding-agent work. It reads session logs from Claude Code, Codex, OpenCode, and Hermes, combines them with recorded tasks and test evidence, and produces a Work Receipt for each task covering commands run, files touched, tools used, time and token usage, cost, outcome, and evidence strength. Agent claims and machine verification are kept as separate axes, with verified status reserved for tasks whose live checks pass after the latest recorded work. The data is available through a macOS app, the live terminal dashboard launched with `agentacct tui`, and a local JSON API. State is stored in local files; the API listens only on loopback, and the project states that it has no login, cloud sync, or telemetry and does not request provider API keys.

useAgent is an open-source AI coworker that gives Claude Code, Codex, OpenCode, and Pi a shared workspace with isolated Linux computers, repositories, terminals, browsers, and team tools. It can handle research, websites, spreadsheets, reports, presentations, and code changes, returning usable files, artifacts, or pull requests through a web app, Slack, REST API, or scheduled tasks. Each run is stored as an event log in Postgres and uses a common event contract across supported agent engines. Daytona or CubeSandbox provides the isolated workstation, while integrations cross a trusted gateway as typed tools so credentials remain on the control plane rather than entering the sandbox. The workspace also supports versioned skills and playbooks, team knowledge and memory, approval-gated tools, revisioned workpieces, and durable sessions. The repository describes useAgent as alpha software with changing APIs and schemas. It can be self-hosted on Linux using Bun and Postgres with pgvector, and is licensed under AGPL-3.0-only; a commercial license is available for proprietary embedding, distribution, OEM, or white-label use.