Grith Scores Every Syscall a Coding Agent Makes and Queues the Ambiguous Ones for a Human
grith-ai/grith posted to Show HN on August 28: ptrace and seccomp supervision on Linux that assigns a risk score to each syscall, auto-allowing below 3.0, queuing 3.0 to 8.0 for human review, and denying above 8.0, with the canonical demo being an agent trying to POST a .env file to an external host. It ships built-in supervisor profiles for eleven agents including Claude Code, Codex, Aider, Cursor, Cline, Copilot and Goose, positioning itself as middleware under the whole agent market rather than a competitor to any one of them. It is MPL-2.0 with paid tiers gated by signed licenses in the same binary, and at 3 stars it is day-one early, so treat the numeric risk thresholds as a design sketch not a validated model.
↳ Follow the thread