← The Wire

Security2026-03-23 · source-backed

Sondera Hooks: Cedar Policy Language for AI Coding Agents.

Confidence
source-backed
Sources
1
Redaction
passed

Story

Sondera intercepts every shell command, file operation, and web request from coding agents and adjudicates them with Cedar — the same formal policy engine used by AWS. Unlike probabilistic LLM guardrails, these rules are deterministic. Rust binaries, stateful trajectory stores, works across Claude Code, Cursor, GitHub Copilot, and Gemini CLI. Presented at Unprompted 2026 with a live demo blocking rm -rf.


Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entities / Same source domain / Shared topic / What happened next / Tension

    Warp Terminal Goes Open Source at 56,000 Stars. It's Not a Terminal Anymore.

    Both cover Claude Code, Cursor, Gemini CLI, Rust; reported by the same outlet (github.com); overlapping topics (agent, claude, code, coding).

  2. Shared entities / Same source domain / Shared topic / What happened next

    RTK Hit 48K Stars by Doing One Thing: Cutting Your AI Coding Bill 60-90%

    Both cover Claude Code, Cursor, Gemini CLI, Rust; reported by the same outlet (github.com); overlapping topics (claude, code, coding, command, cursor).

  3. 1,400 Agent Skills, One Install Command, 36K Stars: The npm Moment for AI Workflows

    Both cover Claude Code, Cursor, Gemini CLI, GitHub Copilot; reported by the same outlet (github.com); overlapping topics (agent, claude, code, coding, command).

  4. A Markdown File Got 44K Stars This Week. Skills Are the New Package Manager.

    Both cover Claude Code, Cursor, Gemini CLI, LLM; reported by the same outlet (github.com); overlapping topics (agent, claude, code, coding, file).

  5. RTK Just Hit 30K Stars Because Everyone's Token Bill Is Out of Control

    Both cover Claude Code, Cursor, LLM, Rust; reported by the same outlet (github.com); overlapping topics (binary, claude, code, coding, command).

  6. Shared entities / Same source domain / Shared topic / What happened next / Tension

    Chrome DevTools MCP Hits 42K Stars. Your Coding Agent Can Finally See What Its Code Does in a Browser.

    Both cover Claude Code, Cursor, Gemini CLI, GitHub Copilot; reported by the same outlet (github.com); overlapping topics (agent, code, coding).

  7. Shared entities / Same source domain / Shared topic

    RTK (Rust Token Killer): CLI Proxy Cuts LLM Token Consumption 60-90% on Dev Commands

    Both cover Claude Code, Cursor, Gemini CLI, LLM; reported by the same outlet (github.com); overlapping topics (agent, binary, command).

  8. Shared entities / Shared topic / What happened next

    SymJack and TrustFall: new symlink-hijack and RCE chains hit six AI coding agents.

    Both cover Claude Code, Cursor, Gemini CLI, GitHub Copilot; overlapping topics (agent, claude, code, coding, copilot); picks up the Claude Code thread on 2026-06-05.

Source trail

Entities

Provenance

AI generated
no
Story unit
2026-03-23-sondera-hooks-cedar-policy-language-for-ai-coding-agents
Labels
source-backed, canonical briefing excerpt