Perplexity Open-Sources Numbat, an Agent Detection-and-Response Layer With 52 CEL Rules and Opt-In Pre-Action Blocking
Perplexity released numbat (github.com/perplexityai/numbat) under Apache 2.0 on 2026-07-24, shipping v0.1.1 on 2026-07-29 at 239 stars and 14 forks. It is a single cgo-free Go binary for macOS/Linux/Windows that observes Claude Code, Codex, OpenCode and Pi through local hooks, OTLP/HTTP log exporters and on-disk session artifacts, normalizes everything into one event model, and evaluates it with a CEL rule engine — 52 built-in rules across 11 categories including privilege escalation, secret exfiltration and lateral movement. Enforcement is off by default and every shipped rule is monitor-only; the differentiator is forensic reconstruction from on-disk artifacts with no prior instrumentation, plus SHA-256-manifested case bundles.
Source
↳ Follow the thread