Framework adapters
Adapters bind agent tool inputs, outputs, generated code, and approvals to the runtime without replacing the orchestration framework.
OpenAI Agents SDK · tool wrappersArchitecture
Track the value. Guard the boundary. Preserve the evidence.
AgentLineage combines selective object-level taint tracking with a conservative system-level fallback. Precision and coverage remain separate, explicit security properties.
InputSensitive source
->
RuntimeTracked value
->
DecisionPolicy engine
->
BoundaryBlock or allow
Four cooperating layers
A narrow trusted path for agent data.
No layer silently claims visibility it does not have. Unsupported transformations produce an explicit precision-loss event and policy-controlled response.
Python dynamic taint runtime
Tracked strings and bytes retain source labels and transformation steps through supported Python operations and structured payload inspection.
TrackedStr · TrackedBytes · AST hooksPolicy and evidence
Guarded sinks evaluate the exact outbound value before execution. Reports capture the source-to-sink path and the reason for the decision.
SecretToNetwork · JSON · JSONLSyscall-level process provenance
The Rust layer models process, file, pipe, socket, and endpoint relationships when precise runtime tracking ends or subprocesses escape it.
ptrace PoC · provenance graphCorrectness boundary
No untracked egress.
Within a supported runtime path, every guarded egress decision includes data provenance. Unsupported paths are blocked, brokered, explicitly approved, or handed to conservative system-level enforcement.
Tracked payload
The runtime knows whether the actual outgoing value is secret-derived.
Precision lost
An unsupported transformation becomes an event, never a silent loss of taint.
Process flow
System provenance conservatively links sensitive reads to later external effects.
Private technical preview
Bring an agent workflow. Trace where its data can go.
We are working with teams whose agents touch source code, customer data, internal tools, or cloud credentials.