项目与实践

EmDash 1.0 separates author identity, signed releases, plugin discovery, and runtime permissions. Installers verify records independently.

NVIDIA OpenShell places sandbox, network, credential, and policy controls outside the agent workload, with a Supervisor enforcing permission boundaries.

MentraOS runs Miniapps in a phone runtime, sharing a connection to manage input, output, hardware capabilities, and permissions across smart glasses.

Company Brain scopes team-agent memory by room and user permissions, with personal authorization, traceable sources, and separate tool-write access.

Jev-Code-Reviewer prioritizes PR changes, expands P0 by default, and retains the original diff and fallback paths so reviewers see key changes first.

GitHub Security Lab Fuzzing Taskflow uses coverage gaps to guide model decisions while deterministic tools execute, measure, and persist results.

Stripe Link CLI separates purchase intent from payment permission. Agents request a purchase and receive one-time credentials only after user approval.

LobsterAI connects phone messages to a local desktop agent. The phone handles tasks and approvals while the computer works with files, terminals, and browsers.

Vercel Labs json-render defines components, actions, and data bindings before generating schema-constrained JSON that can be checked and replayed.

This Minecraft agent uses Astra for slow planning, JEV for frequent action selection, and Mineflayer for execution, with logs and scripts to verify runs.

OpenCloak replaces names, emails, and other personal data with stable stand-ins locally, then restores them when the model responds.

Splash combines model packages, kernels, memory planning, and compatible local APIs into a model-specific inference stack for coding agents.