github Python analyzed f3ef7b7 deep scan · partial (424/7,263 files)

ariffazil/AAA

github

[L1 GOVERNANCE] AAA — Surface layer: cockpit, A2A gateway, agent identity. Routes and displays, never adjudicates.

maintainer
ariffazil
licence
AGPL-3.0
first seen
2026-06-04
last seen
2026-09-09
releases · 30d
2
short id

ariffazil/AAA is an MCP server distributed on github, maintained by ariffazil, tracked here since June 2026. It has shipped 4 releases and exposes 40 tools. Tools include aaa_enterprise_bridge, forge_execute, forge_simulate, forge_transform, human_inference, hypothesis_challenge, and 34 more. Its composite risk grade is D — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, hidden prompt content and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 40 tools appear to reach filesystem, shell / exec, network, secrets, database and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-09: 4 tools added.

full security breakdown →
tools 20 of 40
  • aaa_enterprise_bridge
  • forge_execute
  • forge_simulate
  • forge_transform
  • human_inference
  • hypothesis_challenge
  • hypothesis_generate
  • hypothesis_refine
  • judge_hold
  • judge_sabar
  • judge_seal
  • kernel_bind_actor
  • kernel_bind_context
  • kernel_floor_check
  • kernel_uncertainty_tag
  • mcp_endpoint_health
  • mcp_endpoint_list
  • mcp_endpoint_validate
  • organ_align
  • organ_synthesize
All 40 tools →
release cadence · 90d 2 releases
06-13 00:00 07-27 00:00 now
recent releases last 4
version date src
v2026.08.28 2026-08-27 github
v0.1.0 2026-08-25 github
v2026.06.05 2026-06-05 github
v55.6.22 2026-05-22 github

view all →