SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Open-Source Tool 'Bartholomew' Offers Sub-35µs In-Process Security Gating for AI Agents

0
·1 views

Developers have launched Bartholomew (BTP v3.0) and mcp-proxy-guard, a free, open-source security toolkit designed to protect autonomous AI agents such as Claude Desktop, Cursor, and LangChain from executing harmful actions. The tools address key weaknesses in existing AI guardrails, including slow prompt classifiers that take up to 2,500ms to evaluate actions and unmasked API keys leaking into model context windows. Unlike external chat-based safety filters, Bartholomew operates directly inside the agent's process memory, performing AST syntax tree inspection in under 35 microseconds to block destructive commands before they reach the OS or database. The toolkit also includes in-flight credential redaction and in-memory micro-rollback snapshots to prevent residual damage when a safety rule is triggered. Released under Apache 2.0 and MIT licenses, the project is available on GitHub, PyPI, and npm at no cost.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

GSoC Developer Adds Direct PACS Server Integration to InVesalius Medical Imaging Tool

A Google Summer of Code contributor spent three months building PACS integration for InVesalius, a Brazilian open-source medical imaging platform. Previously, the software lacked native support for connecting to hospital DICOM servers, requiring users to rely on external tools for data exchange. The contributor used Python libraries pynetdicom and pydicom to implement network-based querying, retrieval, and storage of medical images directly within the application. A new user interface was also developed, offering search, multi-level download options, duplicate detection, and graceful error handling with automatic fallback mechanisms. Key technical challenges included managing download cancellation, preventing UI freezes during network queries, and reliably switching between DICOM retrieval methods when needed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

LendingChain Launches Zero-Interest Solana Micro-Lending Platform for Emerging Economies

A developer has built LendingChain, a decentralized micro-lending platform on Solana Devnet that offers zero-interest loans ranging from $5 to $25, submitted as part of a DEV Community Weekend Challenge themed around generosity. The platform targets grassroots entrepreneurs in emerging economies, with a focus on clean energy, sustainable agriculture, indigenous women-led crafts, and tech education. Unlike commercial microfinance institutions that charge 25–45% annual interest, LendingChain routes capital directly into non-custodial Solana escrows, keeping costs near zero through Solana's sub-cent transaction fees. Repaid loans are returned to lenders for re-lending in a cycle the project calls the 'Generosity Multiplier,' aiming to maximize the impact of each dollar contributed. The platform is built using Astro, React, Firebase Firestore for real-time state, and Privy for embedded wallet authentication, and is currently live on Firebase Hosting.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

GitHub to stop queuing jobs to outdated self-hosted runners from September 25, 2026

GitHub will permanently stop routing jobs to self-hosted Actions runners running outdated versions starting September 25, 2026, with scheduled brownouts beginning September 7. During brownouts, affected runners silently fail — jobs remain stuck in a queued state with no workflow-level error, making the issue easy to miss. GitHub provides an API endpoint to check the end-of-life date for any runner version, and the actual deprecation window is roughly 63–71 days after release, longer than the documented 30-day rule. Users of Actions Runner Controller are particularly at risk since auto-update is disabled by default, meaning pinned image tags can become a hidden source of outages. A developer has released an open-source GitHub CLI extension, gh-runner-eol, that audits both live runners and pinned version references in source files such as Dockerfiles and Helm values, with optional SARIF output for CI integration.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Agencies Need a Unified CRM Linking Leads, Projects and Invoices

Most CRM tools used by agencies handle only contact management, leaving sales, project delivery, and billing spread across disconnected platforms like spreadsheets, WhatsApp, and separate invoicing tools. SaaSCRM, a software product aimed at studios and digital agencies, positions itself as an end-to-end operating system that links leads through to payments on a single connected record. The platform claims to address a gap left by generic tools like Zoho CRM, which agencies reportedly outgrow once they need integrated project and invoicing features. Industry data cited in the article estimates around 2,900 monthly searches for 'agency CRM,' suggesting demand for purpose-built solutions beyond basic contact databases. SaaSCRM offers an agency CRM template, a live demo, and custom builds starting at $2,000.

0 comments Read more at DEV Community
Open-Source Tool 'Bartholomew' Offers Sub-35µs In-Process Security Gating for AI Agents · ShortSingh