A general-purpose policy engine that lets you write authorization and compliance rules in Rego and evaluate them from services, Kubernetes, and other systems.
12.4K1.7KGoApache-2.0Well maintainedUpdated 13 hours ago
#policy-engine
Best open-source policy engines and authorization libraries (2026)
These tools define and enforce rules about who can do what, from application-level ACL, RBAC and ABAC checks to blocking tool calls made by AI agents. When choosing one, check which language the rules are written in, whether it embeds in your services or cluster, and whether it works at the application layer or the agent layer. Casbin is a Go access control library configured with model and policy files. OPA is a general-purpose engine that uses Rego and runs well with Kubernetes. Aegis is a runtime firewall for AI agents that adds approvals and a tamper-evident audit trail.
Sort:Recently added
5 repositories
Runtime firewall for AI agents that intercepts, classifies and blocks tool calls before they execute, with approvals and a tamper-evident audit trail.
52355TypeScriptMITUpdated 8 days ago
Policy enforcement, zero-trust identity, execution sandboxing, and SRE tooling for autonomous AI agents, usable from Python, TypeScript, .NET, Rust, and Go.
6.5K+31 this week1.1KPythonMITWell maintainedUpdated 3 hours ago
Go access control library that enforces ACL, RBAC, and ABAC authorization policies, configured through model and policy files.
20.5K+7 this week1.8KGoApache-2.0Well maintainedUpdated 3 days ago
A deterministic policy engine that sits between AI agents and their tools, blocking tool calls that would send sensitive data to unauthorized destinations.
1.6K+1 this week70RustMITWell maintainedUpdated 4 hours ago