What is aegis?

Aegis is a security tool written in Rust that adds a strict approval and audit layer on top of package managers like apt on Linux, npm for JavaScript, pip for Python, Docker, Cargo for Rust, Go modules, NuGet, and VS Code extensions. The problem it addresses is that running commands like sudo apt upgrade or npm install some package is a relatively blind action, you are trusting that the packages are safe and that the operation will not cause harm. Aegis intercepts those operations and replaces them with a multi step process: analyze the intended changes, have a local AI model review the plan, run deterministic policy checks, generate a cryptographically signed execution plan, and only then allow a constrained execution daemon, running as root, to carry out the approved steps. The key design principle is zero trust, the AI model is only a reviewer and never has permission to execute anything or generate shell commands that Aegis runs. All actual policy enforcement and execution is handled by deterministic Rust code, not AI output. This prevents a compromised or hallucinating model from causing damage. Every operation is recorded in a tamper evident audit log. You would use this in security sensitive environments where you want a verifiable paper trail for every package installation or system upgrade, or where you want to prevent accidental or malicious package changes from running without review. The local AI endpoint is configurable and must be OpenAI compatible, you run your own local model, such as via vLLM. The full README is longer than what was shown.