CAGE

A research prototype for agentic security that keeps permission to act inside deterministic checks and lets model-based flow measurement veto a request, never authorize one.