HEROS · agentic security proxy
HEROS-Firewall
Deterministic OWASP ASI01–ASI10 policy engine, HMAC human approvals, and Merkle audit receipts for MCP tool calls.
0.0000FNR · 1000 adversarial
0.0000FPR · 200 benign
0.103 msp99 policy latency
16/16tests
| Layer | Behavior |
|---|---|
| ASI01 goal hijack | Deny prompt-injection patterns in untrusted text |
| ASI02 tool misuse | Deny dangerous shell/SQL/path patterns |
| ASI03 privilege | Deny missing scopes |
| ASI09 human trust | Challenge destructive tools; HMAC token, 5-min TTL, single use |
| ASI10 rogue chain | Deny read_secret → http_post |
policy: deny/challenge/allow receipt: input_hash + output_hash + principal + approval + merkle_root
Policy-layer p99 only; downstream MCP/network time not measured. Dashboard and OCI deployment not built.
Measured local evidence only. No deployment, customer, or trained-weight claim is made unless explicitly stated.