Policy GitHub Repositories (2026) · Open Source Tools

[IROS 26 ScaleInfra Workshop Best Tool Paper] Involving over 50 Advanced Manipulation Policies

FreeRADIUS - A multi-protocol policy server.

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

KCL Language Core and API

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

OTel Weaver lets you easily develop, validate, document, and deploy semantic conventions

The PolicyEngine US Python package contains a rules engine of the US tax-benefit system, and microdata generation for microsimulation analysis.

:unicorn: Type safe K8s middleware for humans

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

SELinux Reference Policy v2

A plugin to enforce OPA policies with Envoy

Self-hosted execution layer for AI agents: connect any agent to real APIs, scope exactly what it can touch, and keep credentials out of the agent's hands.

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

A GitHub App that enforces approval policies on pull requests