AI agent firewall that intercepts tool calls (file, shell, network) and enforces deterministic policies at sub-microsecond latency using CEL, IFC, secret scanning, and audit logging.

Troupe programming language

Mechanization of a noninterference proof for a toy imperative language with small-step semantics in Coq

Inter-procedural analysis framework and dependency/information-flow analysis for LLVM

JSFlow is a security-enhanced JavaScript interpreter for fine-grained tracking of information flow.

Ontology-based Customization and Visualization of Information Flow control in an Industry 4.0 scenario

P4Control: Line-Rate Cross-Host Attack Prevention via In-Network Information Flow Control Enabled by Programmable Switches and eBPF

A library for static information-flow control in Idris

My master thesis on information flow control on a minimal version of the RISC-V architecture with a model checker

Deterministic execution boundary for AI agents. IFC enforcement at the sink. 5 frameworks. 50 attack vectors. Apache 2.0.

A SELinux configuration language that extends CIL with information flow requirements: semantics and verifier

Generates information-flow control mechanisms from a language's specification

InFO is a policy language for regulating information flow control.

Shared protocol types, receipt signing, and verification for the vault family

Odin - Zero Trust AI Agent. Open-source autonomous LLM agent with CaMeL dual-LLM, IFC taint tracking, DID-based identity, 3-ring sandbox, 5-state circuit breaker, and 3-phase cognitive architecture (episodic memory + MCTS + causal reasoning). Built by AgentLayers. MIT licensed.

Future-work extensions to Carboni (2026) Source Downgrading: per-record trust valuation, time-varying credibility, context-dependent valuation, and signed label transport, with executable conformance fixtures.

Test Project introducing the use of Information Flow Control in MontiSecArc

Sigil — hardware-first systems language: algebraic effects, autodiff, SMT verification, multi-GPU backends. No LLVM.

A capability-secure operating system derived from mathematical first principles — machine-checked noninterference proof in Z3, a full reference implementation, compile-time unforgeable capabilities in Rust, and a kernel that boots on bare metal enforcing its own proven guarantees.

Contain the blast radius of a prompt injection — a provenance control plane for tool-using agents over MCP.