A permissions-aware proxy that sits between AI agents and their tools, providing granular access control through tool allowlisting. It features human-in-the-loop approvals via Telegram or Slack, full audit logging, and automated safety middleware like prompt injection detection.