FDE Harness — on entry, write your business judgment into files (workflows, ontology, AI nodes); after departure, audit every change against them. 25 git-diff rules, tamper-evident chain, snapshots (104 tools, 11 plugins). CLI: single entry `sofagent <dom
Audit-first governance layer for AI coding agents.
npm i -g sofagent 一次装全：聚合安装入口（umbrella），等价于同时安装四大功能包。
@sofagent/audit）——sofagent / sofagent audit 命令，扫描 git diff 检查 Agent 是否遵守工作纪律@sofagent/mcp）——104 tools，把审计/训练/治理能力接入任意 MCP 客户端@sofagent/orchestrator）——训练任务全生命周期：数据管道、多卡多机、云执行平面@sofagent/daemon）——dashboard 与 cron 任务npm i -g sofagent
# 在任意 git repo 内运行 30 秒零配置审计
sofagent # 裸命令 = 审计最近一次 commit（audit-first 保留）
sofagent audit # 同上，显式单入口写法
sofagent audit HEAD~3..HEAD # 审计指定范围
sofagent team formation --list # 域路由：编排/阵型
sofagent help # 列出全部域
v1.5.6 CLI 单入口收敛：sofagent <域> <动作> 统一入口（15 域：audit / train / ontology / evolve / daemon / device / workflow / team / orchestrator / compare / mcp / eval / think / ab-test / core），域路由到各实现包。
旧命令（sofagent-audit 等）进入兼容期并提示新入口。完整能力见 @sofagent/audit 与各实现包。
MIT © KongFangXun · 源码 github.com/KongFangXun/sofagent
FAQs
Open-source FDE Harness for AI coding agents. On entry, write business judgment into files; after departure, audit every change against them. 28 audit rules, tamper-evident chain, snapshots (104 tools, 11 plugins).
The npm package sofagent receives a total of 78 weekly downloads. As such, sofagent popularity was classified as not popular.
We found that sofagent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.