RiskKernel — self-hosted guardrails + kill switch for AI agents (your keys, no telemetry, Apache-2.0, single Go binary)

Reddit r/AI_Agents 06/01/26, 01:37 PM Tools

self-hosted guardrails kill-switch ai-agents llmops opentelemetry golang open-source

Summary

RiskKernel is a self-hosted, single Go binary that enforces hard per-run budgets (cost, loop count, wall-clock), kill switches, and human approval gates for AI agents, supporting Anthropic and OpenAI providers with no telemetry.

If you self-host anything touching LLMs, the scary failure mode is an agent that loops and quietly burns money (or fires a side-effecting tool) with no ceiling and no kill switch. RiskKernel is a single \~20MB static Go binary you run yourself that enforces hard per-run budgets — cost, loop count, wall-clock — plus a kill switch, crash-resume, and human approval gates on side-effecting tools. Everything is deterministic Go; an LLM is never in the enforcement path. Self-hosted ethos, end to end: BYO provider key (never stored in state, never logged), no telemetry/phone-home (verifiable — outbound is only to your provider, your OTLP endpoint, and your approval webhook; see SECURITY.md), and your state is a SQLite file you own. Adoption is one env var in front of an existing OpenAI-compatible app. Honest limits: single instance + SQLite (no HA yet), one API token (front it with oauth2-proxy/Authelia for auth), no streaming yet. Native providers are Anthropic + OpenAI today. Apache-2.0, docker run quickstart + demo GIF in the README — feedback welcome. opensource selfhosted aiagents llmops opentelemetry observability golang

Original Article

Similar Articles

DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model

arXiv cs.AI

DreamGuard is a proactive runtime guardrail for LLM agents that uses a risk-aware world model to track latent state and predict future risks, enabling interventions before unsafe actions execute. It outperforms baselines on benchmarks and online evaluation with 25ms latency.

AgentKernelArena: Generalization-Aware Benchmarking of GPU Kernel Optimization Agents

Hugging Face Daily Papers

AgentKernelArena is an open-source benchmark for evaluating AI coding agents on GPU kernel optimization, assessing full agent workflows and generalization to unseen configurations across 196 tasks.

What guardrails do you add before launching an AI Agent app publicly?

Reddit r/AI_Agents

A developer reflects on critical safety measures—such as spending caps, rate limits, and fallback models—that should be in place before launching an AI Agent app publicly to avoid hidden costs and unexpected behaviors.

OpenGuardrails: An Open-Source Context-Aware AI Guardrails Platform

Papers with Code Trending

OpenGuardrails is an open-source platform for AI safety, offering context-aware content-safety and manipulation detection (e.g., prompt injection, jailbreaking) via a unified model, plus a separate NER pipeline for data-leakage identification. It achieves state-of-the-art performance on safety benchmarks and supports private, enterprise-grade deployment.

We built a public red team environment for our AI agent security proxy — submit attacks and get a full security trace back

Reddit r/artificial

Arc Gate is a runtime governance layer for LLM agents that enforces instruction-authority boundaries. The project has launched a public red team environment where users can submit attacks and receive full security traces, with a benchmark showing 100% unsafe action prevention.