Archestra's open-source OpenAPPA blocked every attack across two security benchmarks, while Claude Code's auto mode failed 10% of the time and Microsoft FIDES 31%. The trick: enforcement runs outside the agent's loop entirely, using a deterministic policy algebra instead of a second AI model judging tool calls.

— via InfoQ, Bruno Couriol