Harden AIF

What is Harden AIF?

Harden AIF, short for Agentic Integrity Foundation, is a local security layer for AI coding agents. A private model on your laptop checks every supported tool call before it runs. It can allow an action, ask for approval, rewrite it safely, or block it, keeping your secrets on your machine.

Top Features:

• Pre-execution checks: a local model judges each covered tool call before it runs.
• Secret protection: blocks .env files, SSH keys, and cloud credentials from being sent off-machine.
• Block and steer: stops a risky command and suggests a safe alternative to retry.

Use Cases:

• Secret leak prevention: stop an agent from uploading credentials or private keys mid-task.
• Destructive command guard: block recursive deletes outside the repo and default-branch force-pushes.
• Agent audit trail: review a local record of every allowed, blocked, or approved action.

Who Can Use Harden AIF?

• Solo developers: run Claude Code, Codex, or Cursor with a free local safety net.
• Security teams: set guardrails for coding agents across developer laptops with managed installs.
• Engineering leads: let teams adopt coding agents without fear of leaked secrets.

Pricing

• Free ($0): core secret-flow blocking, local audit view, and no account or card required.
• Enterprise (contact sales): compliance reporting, air-gap mode, MDM installs, support SLAs, and custom terms.

Pros and Cons

Pros:

• Stays local: decisions, prompts, and protected content remain on your own machine by default.
• Free forever floor: core protection for individual developers will not be time-limited or degraded.
• Broad agent support: works with Claude Code, Codex, Cursor, Antigravity CLI, and Kiro today.

Cons:

• Partial coverage: some agents only accept blocks, and Kiro subagent actions are not governed.
• Honest-mistake focus: guarantees target careless agent errors, not a deliberately evasive compromised agent.
• Remote MCP gaps: remote HTTP and SSE MCP servers are reported but not proxied yet.

FAQs:

1) Which coding agents does it support?

Claude Code, Codex, Cursor, Antigravity CLI, Kiro, plus OpenClaw and Hermes.

2) Is it free?

Yes, core local protection is free forever, while enterprise features use custom pricing.

3) Does my code leave my machine?

No, the decision engine and audit trail stay local, and telemetry is optional.

4) How do I install it?

Install the free CLI, run aif configure, then connect your coding agents.

5) What happens if the local service fails?

The hook fails closed, blocking the call and explaining how to recover.