Content
<div align="center">
<img src="README-LOGO.png" alt="Faramesh" width="480" />
**Every agent tool call is a policy decision.**
Declare permissions in `governance.fms`. A local daemon permits, defers, or denies each tool call before it runs. Decisions are hash-chained in a WAL. No SDK lock-in. No cloud required.
<p>
<a href="LICENSE"><img alt="License: Apache-2.0" src="https://img.shields.io/badge/License-Apache--2.0-0f172a?style=flat-square&logo=apache" /></a>
<a href="https://github.com/faramesh/faramesh-core/stargazers"><img alt="Stars" src="https://img.shields.io/github/stars/faramesh/faramesh-core?style=flat-square" /></a>
<a href="https://github.com/faramesh/faramesh-core/releases"><img alt="Latest release" src="https://img.shields.io/github/v/release/faramesh/faramesh-core?include_prereleases&sort=semver&style=flat-square&label=Release" /></a>
<a href="https://github.com/faramesh/faramesh-core/actions"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/faramesh/faramesh-core/ci.yml?style=flat-square&label=CI" /></a>
<a href="https://docs.faramesh.dev/"><img alt="Docs" src="https://img.shields.io/badge/Docs-faramesh.dev-0f766e?style=flat-square" /></a>
</p>
<p>
<a href="https://farameshlabs.slack.com/ssb/redirect"><img alt="Slack" src="https://img.shields.io/badge/Slack-Join%20our%20developer%20community-4A154B?style=for-the-badge&logo=slack" /></a>
<a href="https://docs.faramesh.dev/quickstart/"><img alt="Quickstart" src="https://img.shields.io/badge/Quickstart-Read%20the%20docs-0f172a?style=for-the-badge" /></a>
</p>
<img src="0522.gif" alt="Faramesh decisions streaming in real time" width="780" />
</div>
---
## Install
```bash
curl -fsSL https://install.faramesh.dev/install.sh | bash
faramesh version
```
Also Homebrew, npx, Go install, or build from git. [All install paths →](https://docs.faramesh.dev/quickstart#install-the-cli)
## Works with the agent stack you already have
LangGraph · LangChain · CrewAI · OpenAI Agents · Claude Agents SDK · Claude Code · Cursor · MCP · AutoGen · AG2 · LlamaIndex · Pydantic AI · Bedrock · Semantic Kernel
13 frameworks today. SDK shim, MCP proxy, HTTP proxy, or A2A. Pick the tier that matches the agent. [Framework guides →](https://docs.faramesh.dev/frameworks/)
## What you get
- **Deterministic decisions.** Pure functions over policy and the action payload. No LLM in the decision path.
- **Non-bypassable enforcement.** Local daemon. Every tool call goes through it. No SDK to forget to wrap.
- **Identity-bound.** SPIFFE SVIDs, OIDC, or cloud workload identity. Credentials brokered at the call site.
- **Tamper-evident audit.** Decision Provenance Records, hash-chained WAL, optional KMS signing.
## A policy
```
agent "support-bot" {
default deny
rules {
permit crm/customers/read
permit crm/tickets/create
permit email/send if domain == "@yourcompany.com"
defer email/send if domain != "@yourcompany.com"
defer billing/cancel_subscription
deny billing/delete_account
}
rate_limit "email/send": 50 per hour
budget daily {
max $20
on_exceed defer
}
}
```
External emails go to a human. Cancellations require a click. Deletion is impossible without editing the policy. Daily spend ceiling. Every decision lands in a verifiable log.
[More policy patterns →](https://docs.faramesh.dev/use-cases/) · [FPL reference →](https://docs.faramesh.dev/fpl/)
## How Faramesh compares
Faramesh is the local enforcement daemon for tool-call decisions. It's narrower than full-stack agent platforms (Microsoft AGT) and operates outside the model output evaluation layer (Galileo Agent Control). [Detailed comparison →](https://docs.faramesh.dev/compare/alternatives/)
## Documentation
**Start here** · [Why Faramesh](https://docs.faramesh.dev/introduction/) · [Quickstart](https://docs.faramesh.dev/quickstart/) · [Write your first policy](https://docs.faramesh.dev/guides/your-first-policy/)
**Concepts** · [How it works](https://docs.faramesh.dev/concepts/how-it-works/) · [Interception](https://docs.faramesh.dev/concepts/interception/) · [Enforcement](https://docs.faramesh.dev/concepts/enforcement/) · [Auditing](https://docs.faramesh.dev/concepts/auditing/)
**Reference** · [FPL](https://docs.faramesh.dev/fpl/) · [Stack file](https://docs.faramesh.dev/stack/) · [CLI](https://docs.faramesh.dev/cli/) · [Python SDK](https://docs.faramesh.dev/sdks/python/) · [TypeScript SDK](https://docs.faramesh.dev/sdks/typescript/)
## Community
[Slack](https://farameshlabs.slack.com/ssb/redirect) for daily conversation. [GitHub Discussions](https://github.com/faramesh/faramesh-core/discussions) for design proposals. [Contributing guide](https://docs.faramesh.dev/guides/contributing/) for the policy pack registry and framework adapters.
Project governance, maintainer roles, and the public roadmap are documented in
[GOVERNANCE.md](GOVERNANCE.md), [MAINTAINERS.md](MAINTAINERS.md), and
[ROADMAP.md](ROADMAP.md). Faramesh follows the project
[Code of Conduct](CODE_OF_CONDUCT.md) and accepts security reports through
[SECURITY.md](SECURITY.md).
## Star this repo if you ship AI agents to production
It helps other engineers find Faramesh.
## License
[Apache-2.0](LICENSE).
## Maintained by
Faramesh is maintained by the Faramesh project maintainers and contributors.
