NEMESIS DEFENDER v0
Deterministic enforcement against destructive commands and supply-chain malware in development workflows assisted by LLM agents. Intercepts and blocks before execution via pre-tool hooks (multi-IDE), a scanner with 6 layers (AST, byte, regex, deny-list, entropy, decoder), and an eBPF/BPF LSM layer on Linux as a kernel backstop.
Architecture in 3 independent layers: Pretool/Posttool Hook (interception before Bash.run()/file-write), Nemesis Defender (scanner with 36 categories in the built-in deny-list and 14 dispatched AST visitors), and eBPF Kernel LSM (Linux, opt-in). Quarantine by corroboration (moves, does not delete) with reversibility via restore/purge. Supports Claude Code, OpenAI Codex, Cursor, GitHub Copilot, VS Code, Devin, and Gemini/Agents. Includes Nemesis Doctor (7 structured checks) and a pentest suite as a CI gate. Fail-closed design: any panic becomes exit 2 (block).
- Rust
- eBPF
- BPF LSM
- tree-sitter
- Linux
- macOS
- AGPL-3.0
In production since 2024 · Sole author and maintainer
