Back to Agents
vectimus
vectimus March 10, 2026
29 copies 0 downloads
Deterministic governance for AI coding agents. Cedar-based policy engine that intercepts every agent action and evaluates it against deterministic rules before execution.
Agent Definition
# Vectimus **Cedar policies for every AI agent action. Coding tools and agentic frameworks. Every evaluation under 10ms. Zero config.** [](https://pypi.org/project/vectimus/) [](LICENSE) [](https://github.com/vectimus/vectimus/actions) [](https://pypi.org/project/vectimus/) <p align="center"> <img src="demo.gif" alt="Claude Code session with Vectimus blocking rm -rf, terraform destroy and force push while allowing safe commands" width="720"> </p> ## Install ```bash pipx install vectimus vectimus init ``` That's it. Cedar policies evaluate every tool call - whether from a coding agent in your terminal or a framework agent in production. Dangerous commands, secret access, infrastructure changes and supply chain attacks blocked before execution. ## What it catches Every policy references the real-world incident that motivated it. No "best practice" filler. | Pack | What it blocks | Example | |------|---------------|---------| | **Destructive Ops** | `rm -rf`, `terraform destroy`, `docker system prune` | Production wipe prevention | | **Secrets** | Credential file access, env variable exposure | `.env`, AWS keys, SSH keys | | **Supply Chain** | `npm publish`, `pip install` from URLs, registry tampering | Clinejection-class attacks | | **Infrastructure** | `terraform apply`, `kubectl delete`, cloud CLI mutations | Unreviewed infra changes | | **Code Execution** | `eval()`, `exec()`, unsafe interpreter invocations | Code injection via agents | | **Data Exfiltration** | `curl` to external hosts, file upload, data piping | Credential theft, data leakage | | **File Integrity** | Writes to `.vectimus/`, sensitive config paths | Governance tampering | | **Database** | Direct database CLI access, credential har
Comments
More Agents
View alldocumentation
Documentation & Onboarding Agent
Agent that generates comprehensive documentation, API references, architecture diagrams, and developer onboarding guides from existing code.
C
Communitydebugging
Cursor Bug Triage Agent
Agent configuration for systematic bug investigation that traces issues from error logs through the codebase to root cause with suggested fixes.
C
Communityapi
API Integration Agent
Agent for integrating third-party APIs including SDK setup, type generation, error handling, retry logic, and rate limit management.
C
Communitycoding
Cursor Agent Mode
Cursor's built-in autonomous coding agent that can make multi-file edits, run terminal commands, search the codebase, and iteratively build features with minimal human intervention.
C
Cursor Teamcloud
Cursor Background Agent
Cloud-based autonomous coding agent that runs in the background on remote sandboxed environments, handling complex multi-step tasks while you continue working.
C
Cursor Teamcomposer
Cursor Composer Agent
Cursor's multi-file editing agent within Composer mode that can create, edit, and delete files across your entire project in a single conversation.
C
Cursor Team