cordum
The action firewall for AI agents, enforcing policy and human approval before risky operations.
GraphCanon updated Sep 20, 2026 · GitHub synced Sep 20, 2026
49views this month
Decision brief
Cordum is an action firewall for AI agents, designed to enforce policy and human approval before risky operations, with a focus on auditability and compliance.
Good fit when
- When you need a framework that ensures human approval before AI agents execute risky operations, such as shell commands or production changes.
- If your organization requires a comprehensive audit trail for AI actions, including a dashboard and workflow engine for tracking and compliance.
Avoid when
- If you are looking for a solution that can be offered as a competing hosted service before January 1, 2029, as the current license restricts this use case.
- When your deployment environment does not meet the prerequisites for running Cordum, such as Docker Desktop v4+, Go 1.26.3+, and at least 4 GB of RAM.
Observed Sep 18, 2026 · Source: enrich:decision_facts
Verify the decision
Maintenance and security
Full trust report- Maintenance
- Very active (0d since push)
- As of Sep 18, 2026
- Provenance
- Not a fork · Organization account
- As of Sep 18, 2026
- Security (OSV)
- 13 low (13 low)
- As of Sep 18, 2026
Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.
Install
go get github.com/cordum-io/cordumSimilar tools
Same-category neighbours. No typed graph edges are catalogued for this tool yet.
Evidence and technical details
Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.
Overview
Cordum is a framework for governing AI agents, ensuring that actions are approved by humans and audited for compliance. It includes a dashboard, workflow engine, and safety kernel.
Capability facts
- Deploy
- Self-host
Source: dockerfile:Dockerfile · Sep 18, 2026
- Docker
- Dockerfile present
Source: dockerfile:Dockerfile · Sep 18, 2026
- MCP server
- No MCP server detected
Source: repo_scan · Sep 18, 2026
- Languages
- go, javascript
Source: github.language+package.json · Sep 18, 2026
Categories
Tags
README
Option A: Install from source One command stands up the full stack — API gateway, scheduler, safety kernel, workflow engine, context engine, dashboard, NATS, and TLS secured Redis — with auto generated secrets, auto provisioned certificates, and a post deploy smoke test that exer...
For agents
This page has a .md twin and JSON over the API.