From 53db85c59224edbe1e373084754915de561aec20 Mon Sep 17 00:00:00 2001
From: anthony-chaudhary <18080164+anthony-chaudhary@users.noreply.github.com>
Date: Sun, 21 Jun 2026 18:18:49 -0700
Subject: [PATCH] Add fak (Fused Agent Kernel) to Agent Firewalls & Gateways
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

fak is an open-source (Apache-2.0) Go agent kernel that sits on the
tool-call path as a default-deny capability gate plus a result quarantine
— a direct fit for the Runtime Protection section. Format matches the
section's existing entries (bold link, description ending with a period).

Signed-off-by: anthony-chaudhary <18080164+anthony-chaudhary@users.noreply.github.com>
---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 64858d4..cc2b928 100644
--- a/README.md
+++ b/README.md
@@ -26,6 +26,7 @@ This list is organized by the **security lifecycle** of an autonomous agent, cov
 - **[AgentGateway](https://github.com/agentgateway/agentgateway)** - A Linux Foundation project providing an AI-native proxy for secure connectivity (A2A & MCP protocols). It adds RBAC, observability, and policy enforcement to agent-tool interactions.
 - **[Envoy AI Gateway](https://gateway.envoyproxy.io/)** - An Envoy-based gateway that manages request traffic to GenAI services, providing a control point for rate limiting and policy enforcement.
 - **[Immunity Agent](https://github.com/PrismorSec/immunity-agent)** - Security-focused AI agent runtime for scanning prompt injection, MCP risks, unsafe package installs, and dangerous agent actions before execution.
+- **[fak (Fused Agent Kernel)](https://github.com/anthony-chaudhary/fak)** - A single Go binary that sits between an agent and its tools and adjudicates every tool call on the same call path before it runs: a default-deny capability gate the model can't talk past, plus a quarantine that holds suspicious tool results out of the model's context to contain prompt injection and tool poisoning. Apache-2.0.
 
 ## ⚔️ Red Teaming & Vulnerability Scanners
 *Offensive tools to test agents for security flaws, loop conditions, and unauthorized actions.*