Decompose – Split text into classified semantic units, no LLM, 14ms
Non-LLM deterministic semantic decomposition—14ms, no hallucination, MCP-ready.
One gateway in front of every protocol. Same policy across MCP, LLMs, databases and containers. Wire-level enforcement at under 5ms.
Wire-protocol parsing blocks DROP TABLE before execution with zero code changes.
DevOps, SRE, and security teams managing production infrastructure access
Teleport · StrongDM · Tailscale
I'm Andrios, founder of Hoop.dev, an OSS layer-7 gateway for infra access. We just released a new integration: put LLMs between devs' or agents' actions and databases or Kubernetes.
The model gives a more nuanced analysis of the action, not only the syntax. Like: is this deleting data? Updating large number of entries? How risky is it? Then it decides if it will allow the execution, send it to human approval, or block it completely.
Because Hoop sits at the network layer, this process happens in-transit, as data is passing through the gateway. Very low setup required.
As product teams put agents in production, we're seeing security and SRE teams also shipping agents to enforce controls, and this is a nice way of deploying them.
What do you think about this approach? Any feedback is super welcome here.
Project is here: https://github.com/hoophq/hoop
Non-LLM deterministic semantic decomposition—14ms, no hallucination, MCP-ready.
Separates LLM cognition from OS execution via discrete actions, not continuous control.
Governance for AI code is real problem, but Guard is vapor—roadmap, not shipping product.
Kernel interception stops runaway agents where LangGraph and AutoGen only advise.
The demo implements post-generation admissibility checks and returns structured refusals (decision codes, rule triggered, divergence metrics and a stable prompt fingerprint) so you can audit enforcement decisions. It's a crisp, focused proof-of-concept for runtime enforcement — useful as a starting pattern — but it stops short of addressing bypass/adversarial vectors, deployment integration, or guarantees that make it enforceable at scale.
Zero-trust networking via zrok beats LiteLLM when your GPUs sit behind NAT.