BLA
BLA (Blind LLM Agents) is the open-source Blue Defense MCP and CLI built to protect software artifacts against automated AI reverse-engineering workflows.
Every AI employee. One workplace. Connect the bots you already run, set what they may do, and approve anything risky.
SecurityJavaScript · CSSGitHub @roycemyOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
No updates detected yet. GitHub releases will appear here.
Owners of public repositories under a personal GitHub account can sign in to verify ownership and manage the introduction themselves. No administrator approval is needed.
Sign in, generate a verification file, and commit it to this repository’s default branch within 30 minutes. Files on other branches or forks do not count. Then check the file below to manage the project without administrator approval. Keep the file to retain your access.
If needed, you will go to sign-in. After signing in, return here and press your chosen verification button again.
Run /nomorevibe verify in your project folder to verify ownership and manage the introduction yourself.
Verify in one minuteAsk about other verification options
Foreman v8: real permission gateway for AI agents
Translation pending
Taken from the repository README
Loading the full README. The saved excerpt is shown below.
Foreman core (v8)
Real permission gateway for AI agents. Agents never hold credentials; they call POST /api/gateway/act with a Foreman key.
Foreman checks status (revoked/kill), AUTO/ASK/NEVER, per-action and daily limits, executes the action itself, and writes a hash-chained receipt.
ASK actions are paused server-side until the owner approves (POST /api/requests/:id/approve).
node e2e.js runs the full proof against a deployment.Read the full README ↗Real permission gateway for AI agents. Agents never hold credentials; they call POST /api/gateway/act with a Foreman key.
Foreman checks status (revoked/kill), AUTO/ASK/NEVER, per-action and daily limits, executes the action itself, and writes a hash-chained receipt.
ASK actions are paused server-side until the owner approves (POST /api/requests/:id/approve).
node e2e.js <base-url> runs the full proof against a deployment.