Show HN: A deterministic tool-call gateway vs. prompt-injection classifiers

Category: security

Tags: ai-agents, prompt-injection, authorization, security, tool-use

Score: 7.0/10 (Innovation: 7, Technical: 7, Documentation: 8, Utility: 6)

Provenance Gate is a deterministic authorization gateway that intercepts AI agent tool calls and checks the provenance of control values (e.g., recipient, URL) against user input vs. untrusted content, refusing side-effect calls when provenance is suspicious. It is notable for offering a model-free, interpretable alternative to prompt-injection classifiers, with transparent benchmarks on AgentDojo and detailed analysis of real incidents and limitations.

Target audience: AI security engineers, backend developers integrating LLM agents, devops and security teams

Repository: https://github.com/Yehielamor/provenance-gate/blob/main/posts/01-provenance-vs-detection.en.md · Python · Apache-2.0 · 2 stars

View on Hacker News