Bulwark

A developer built Bulwark, an open-source scanner and lockfile system that detects when an MCP server's tool descriptions change after a user has approved them. The tool hashes every string an agent i…

Bulwark, an OS-level read gate for AI coding agents, blocks file reads at the kernel level by inode before bytes reach the agent, preventing access to protected files like .env or .ssh. It uses fanoti…