2026-10-11 17:10 UTC

Independent testing will determine whether OpenCode Guardians can block unsafe coding-agent tool calls with low latency and an acceptable false-positive rate.

state: expiredheat: lowuncertainty: highnovelscott: nonecoding-agents agent-harnesses formal-verification agent-securityalbertjoseph0OpenCodeErik MeijerNada Amin

What is this?

OpenCode Guardians is presented in the evidence titles as a plugin for the open-source OpenCode coding agent that intercepts bash, read, edit, and write tool calls and sends their parameters to a local static verifier before execution. The proposed value is preventing unsafe agent actions, but the supplied results provide no independent measurements of blocking effectiveness, latency, or false-positive rates. The snippets also do not establish who built Guardians or support the web answer’s claim that it came from an Amazon team, so the listed people and affiliations remain unverified.

Why it matters to Scott

No intersection found in Scott’s wikis, and the radar does not already track this plugin, its actors, or the claimed verification approach. The case remains an unvalidated testing hypothesis rather than evidence that would change Scott’s coding-agent or harness work.
queries asked of Scott's wikis
  • coding-agent tool-call interception and policy enforcement
  • static verification versus sandboxing for agent safety
  • agent harness permission gates and approval workflows
  • false-positive and latency budgets for security guardrails
  • local policy engines for coding-agent tools
  • formal methods for constraining autonomous tool use

Measured heat

no measured readings yet — the hourly heat pass fills this in

How the heat travelled

no chain yet — the hourly chain pass fills this in

Evidence (2) — ⭐ canonical anchor

sourceobjectauthorscorecomments
🟧 hnShow HN: I built a static verifier for OpenCode to stop unsafe AI tool callsabj90810
🟧 echo.github ⭐An OpenCode plugin that intercepts bash, read, edit, and write tool calls before execution and sends their parameters to a local static-verialbertjoseph0——

Interpretation history

Decision trace