Skip to content

The Universal Enterprise Release

Choose a tag to compare

View all tags
@Harshit-J004 Harshit-J004 released this 04 Apr 03:39
· 10 commits to main since this release
v6.1.0
729279b

Version 6.0.0 built the Absolute Zero firewall for Python agents. Today, Version 6.1.0 breaks ToolGuard out of the Python ecosystem entirely. We have transformed ToolGuard into a distributed, language-agnostic Enterprise Firewall capable of protecting massive agent swarms written in any language, running on any cloud.

This release introduces three massive architectural evolutions: The HTTP Proxy Sidecar, Redis Distributed State, and Asynchronous Webhook Approvals.

--- NEW: Enterprise HTTP Proxy Sidecar (Cross-Language Support) ---
ToolGuard is no longer just a Python library. It is a universal network sidecar.

  • Asymmetric Language Architecture: ToolGuard can now be used natively by developers building agents in TypeScript, Node.js, Go, Rust, Java, or any language that can make an HTTP request.
  • REST Intercept Endpoint: Simply POST your tool payloads to /v1/intercept. The proxy executes the full 7-Layer security pipeline and returns a deterministic allow/deny response, bridging perfectly into the Obsidian Dashboard.
  • Docker & Kubernetes Integration: Abstract Python away completely. Deploy the official Docker image (ghcr.io/Harshit-J004/toolguard-proxy:latest) directly to your production cluster.
  • API Key Security: Secure your proxy sidecar against unauthenticated internal network requests using strict Bearer Token middleware via the TOOLGUARD_API_KEY environmental variable.
  • K8s Readiness Probes: Includes native GET /v1/health probes for Kubernetes orchestration.

--- NEW: Distributed State (The Cluster-Safe Upgrade) ---
As ToolGuard moved to the enterprise, local file storage became a bottleneck for swarm orchestration.

  • Redis Enterprise Backend: Implemented a robust RedisStorageBackend enabling atomic INCR, SETEX, and HSET operations.
  • Cluster-Safe Rate Limiting: Prevents Rate-Limit (L4) leakage across 50-pod Kubernetes load-balancers. If an agent loops maliciously, the entire cluster denies the transaction instantly.
  • Unified Interface: Decoupled all memory systems (Rate Limits, Approval Caches, Schema Fingerprints, Execution Grants) with zero-config local SQLite/JSON fallbacks for local development.

--- NEW: Asynchronous Webhook Approvals (Headless Resumption) ---
The final piece for enterprise automation: Headless Human-in-the-Loop.

  • Headless-First Approvals: When a Risk Tier 2 or 3 tool fires in an unattended cloud server (where sys.stdin.isatty() == False), ToolGuard no longer permanently fails closed. Instead, it pauses the execution thread safely.
  • 4 Native Webhook Integrations: Instantly fires interactive approval requests to Slack (Block Kit), Discord (Embeds), Microsoft Teams (Adaptive Cards), or Generic webhooks (Zapier/Make.com).
  • Cryptographic Execution Grants: Generates an ephemeral grant_id UUID stored in Redis with a PENDING state.
  • FastAPI Approval Server: Pre-built HTTP endpoints (/toolguard/approve & /toolguard/deny) rendered with beautiful dark-mode HTML confirmation pages.
  • Polling Resumption Loop: The interceptor securely polls the Redis cluster for a manager's remote authorization up to the timeout limit before securely unblocking the LLM chain.

The firewall is no longer a local library. It is a distributed global defense network.

Credits: Architected and Engineered by Harshit-J004.
Repository: https://github.com/Harshit-J004/toolguard
Documentation: https://github.com/Harshit-J004/toolguard#readme
Deployment: docker run -d -p 8080:8080 -e TOOLGUARD_API_KEY="my_secret_key" ghcr.io/harshit-j004/toolguard-proxy:latest

Assets 2
Loading
0 Join discussion