AEGIS

AEGIS is a runtime firewall for AI agents. It inspects untrusted content reaching your agent — inbox messages, tool results, web fetches, MCP responses, skill files — and blocks prompt injection, jailbreaks, and impersonation before the agent ever sees it. Genuine status messages pass straight through.

Two layers: L1 Aho-Corasick pattern matching (pure Rust, microseconds, ~120 known attack families with homoglyph and leetspeak normalization) and L2 a local Qwen3-1.7B judge via llama.cpp — fully offline, no network. On a held-out labeled set it scores 90% recall, 95% precision, 92% F1. An 880 KB binary with an HMAC-chained audit log.