Constrails: Early-Alpha External Governance Layer for AI Agents

Constrails is an early-alpha external runtime governance layer for AI agents. Instead of relying on agents to self-regulate, it places a control layer between the agent and the tools it wants to use.

Key Features

The tool implements several safety and governance mechanisms:

• Capability checks
• Risk scoring
• Policy evaluation
• Allow/deny/approval/sandbox decisions
• Approval replay
• Audit logging
• Auth/key controls
• Sandbox posture enforcement
• Early anti-exfiltration heuristics
• Basic burst-rate limiting

The developer created Constrails in response to seeing agents try to work around their own restrictions when blocked, arguing that safety controls should live outside the agent whenever possible.

This is an early-alpha release, not production-ready, but has been tested enough for public sharing. The developer is actively seeking feedback, criticism, and ideas from the community.

GitHub repository: https://github.com/TMFPRETTY/Constrails