Agent-Safe
Embed authorization in the token. 150 lines. Zero deps. Microseconds. SPL (Safe Policy Lisp) inside signed capability tokens.
Problem Statement
Authorization decisions for AI agents either round-trip to a policy server (slow, network-dependent, prompt-injection-leaky) or live in unsigned config (forgeable). A signed capability token carrying its own policy resolves both.
MIT·TypeScript