ilyautov/cordon

A deterministic layer between untrusted content and agent actions: it removes the hidden layer, remembers where data came from, and keeps calls inside the boundaries of the intent. | A deterministic layer between untrusted content and AI agent actions: it removes the hidden layer and remembers the provenance

This repository also configures its own agents. See what cordon tells them →

5Stars on the repository

7Mods indexed here, across every type

yesterdayLast push, which is what freshness is scored on

MITLicence, which decides whether bodies are shown

Sort Relevance Recently updated Fewest tokens Security grade Repo stars Stars this week Top rated 1 mods

cordon

ilyautov/cordon

Plugin Gemini CLI

A prompt-injection firewall for AI agents, with no AI inside: your agent reads anything and takes orders only from you. For Claude Code, Codex CLI, Kimi Code, DeepSeek Harness, Gemini CLI, MCP hosts and LangChain.

not rated 5 changed 18d ago A tokens not measured original MIT