failproofai

Observability plus policy enforcement for agent harnesses: records every run across 12 harnesses (Claude Code, Codex, Cursor, Hermes…) and blocks dangerous tool calls with 39 built-in policies.

2,130 444 MDX NOASSERTIONupdated yesterday

security coding

View on GitHubDispute this mapping →

Curator's take

The one to install the day an agent first runs `rm -rf` or force-pushes: hooks into ten coding CLIs plus the Hermes and OpenClaw gateways, records sessions to a local dashboard on :8020, and enforces policies *before* the tool call runs — sanitize API keys, block .env reads, sudo, terraform/kubectl, destructive SQL, direct pushes to main. Custom policies are a JS file in .failproofai/ that returns allow/deny/instruct; packs are versioned GitHub repos. NOT a tracing platform for agents you built from code (the Python SDK gives tracing but enforcement needs a hook in your runtime), and note the source-available licence and optional cloud — local works without an account.

Mapped by ShipWithAI editors · links verified

Continue your stack

What teams reach for next — and why each earns a place beside failproofai. Ranked by curator confidence.

pairs wellalternativebuilt withpick a node for the why · open it from the panel

README.md1 min read

Translations: 简体中文 · 日本語 · 한국어 · Español · Português · Deutsch · Français · Русский · हिन्दी · Türkçe · Tiếng Việt · Italiano · العربية · עברית

See what your agents do. Stop known failures before they repeat. Failproof AI works wherever your agents run: coding tools like Claude Code and Codex, chat gateways like Hermes, self-hosted assistants like OpenClaw, and agents you instrument yourself. It records each run and can block dangerous tool calls before they execute.

Failproof AI in action

Supported harnesses

Twelve harnesses in two classes are supported: ten coding CLIs, plus two gateways: Hermes, OpenClaw. The policy API and session history are shared; which events can block varies by harness.

Agents that run in none of them report through the Python SDK, which gives you tracing, sessions and audits. Enforcement there needs a hook in your own runtime — talk to us and we'll map it.