AI agent firewall that intercepts tool calls (file, shell, network) and enforces deterministic policies at sub-microsecond latency using CEL, IFC, secret scanning, and audit logging.

Troupe programming language

Mechanization of a noninterference proof for a toy imperative language with small-step semantics in Coq

Inter-procedural analysis framework and dependency/information-flow analysis for LLVM

JSFlow is a security-enhanced JavaScript interpreter for fine-grained tracking of information flow.

Ontology-based Customization and Visualization of Information Flow control in an Industry 4.0 scenario

P4Control: Line-Rate Cross-Host Attack Prevention via In-Network Information Flow Control Enabled by Programmable Switches and eBPF

A library for static information-flow control in Idris

My master thesis on information flow control on a minimal version of the RISC-V architecture with a model checker

Deterministic execution boundary for AI agents. IFC enforcement at the sink. 5 frameworks. 50 attack vectors. Apache 2.0.

A SELinux configuration language that extends CIL with information flow requirements: semantics and verifier

Generates information-flow control mechanisms from a language's specification

Single-operator Hapax operating environment: externalized executive function, constitutional governance, semantic recruitment, multimodal perception, and refusal-as-data research infrastructure.

InFO is a policy language for regulating information flow control.

Shared protocol types, receipt signing, and verification for the vault family

Odin - Zero Trust AI Agent. Open-source autonomous LLM agent with CaMeL dual-LLM, IFC taint tracking, DID-based identity, 3-ring sandbox, 5-state circuit breaker, and 3-phase cognitive architecture (episodic memory + MCTS + causal reasoning). Built by AgentLayers. MIT licensed.

Test Project introducing the use of Information Flow Control in MontiSecArc

Future-work extensions to Carboni (2026) Source Downgrading: per-record trust valuation, time-varying credibility, context-dependent valuation, and signed label transport, with executable conformance fixtures.

Secure MCP gateway for AI agents — deny-wins ACLs, IFC, in-process ML safety, 138 Kani proofs

Sigil — hardware-first systems language: algebraic effects, autodiff, SMT verification, multi-GPU backends. No LLVM.