Halofy Unifies AI Agent Governance with Verifiable Access and Erasure 🔗
It provides identity, policy, and audit for agents using MCP or HTTP over Postgres/pgvector and Git-backed knowledge tiers.
Halofy solves the fragmentation of AI agent access by acting as a centralized governance layer that enforces identity, policy, provenance, and audit across organizational knowledge. Instead of each agent managing its own credentials or context silos, Halofy resolves actor, role, namespace, and source scope server-side before any read or write operation.
It supports governed context lifecycle management including entity resolution, semantic dedupe, supersedence chains, and append-only audit trails. The system operates over two tiers: Postgres with pgvector for operational context and encrypted, Git-versioned storage for cold data, with embedded PGlite as a zero-setup local default. Agents interact via a standardized surface offering mem_read, mem_write, mem_search, mem_assemble, mem_forget, policy, sharing, and export operations over MCP or HTTP. All connectors—filesystem, Postgres, Obsidian, and CSV—feed the same governed write path, ensuring consistency. A hermetic test lane with StubLlm and HashEmbedder enables offline validation without API keys, model downloads, or network calls. This design supports inspection, self-hosting, and air-gapped deployment while maintaining verifiable erasure through signed operations.
The catch: The project is early-stage with only 8 open issues and a recent commit history, raising questions about long-term maintenance and real-world scalability beyond demo and test environments.
Why this leads today Halofy introduces a foundational governance layer for AI agents — covering identity, policy, audit, and signed erasure — filling a critical gap in organizational AI safety and scalability not addressed by prior coverage of agent behavior or evasion.
- Enterprise teams governing internal AI agent access to shared knowledge
- Developers building auditable multi-agent systems with traceable context
- Organizations requiring verifiable data erasure for compliance with AI regulations
Source: halofyai/halofy — based on the project README.