OWASP / www-project-agent-memory-guard

What it does

• Integrity. SHA-256 baselines flag out-of-band tampering with immutable keys.
• Threat detection. built-in detectors for prompt injection, secret/PII leakage, protected-key modifications, size anomalies, and self-reinforcement loops.
• Policy enforcement. YAML-defined rules map findings to actions: allow, redact, quarantine, or block.
• Forensics. every decision emits a structured SecurityEvent; point-in-time snapshots enable rollback to a known-good state.
• Drop-in middleware. ships with GuardedChatMessageHistory for LangChain; framework-agnostic MemoryStore protocol covers any backend.