VAREK

VAREK decides whether each action an autonomous AI agent attempts is authorized, and enforces that decision at the operating-system kernel boundary. Policies are evaluated by an SMT decision procedure that returns one of three verdicts: SATISFIED, UNSATISFIED or UNKNOWN. Enforcement runs through the Warden, a default-deny supervisor built on seccomp-BPF and seccomp user-notify, which decides on the object actually delivered and so closes path-traversal, symlink and /proc/self escapes. Every ALLOW carries a proof object that an independent checker verifies in-line, and decisions are recorded in an unforgeable authorization log that can be exported as CycloneDX 1.6 evidence. VAREK runs on Linux, and on macOS through a Linux VM. Current release: v1.37.0. VAREK has not yet had an independent security audit; funding that audit is the first priority.