OpenAPPA

Deterministic policy engine that sits between an AI agent and its tools, tracking the sensitivity and trust of everything the agent reads and checking each tool call against a data-flow policy before it runs so sensitive data cannot reach unauthorized destinations. It implements the Agentic Permissions Policy Algebra (APPA).