cupcake

A native policy enforcement layer for AI coding agents. Built on OPA/Rego.

Not yet testedsource: GitHubhomepageRustApache-2.0commit 27b94b84f6cf

Rust, Apache-2.0 licensed. The project labels itself: agent security, alignment, claude code, coding agents, cursor, factory ai, gemini cli and hooks.

cupcake has not been verified yet.

Measured by Argusic on a fresh machine every time. Every number links to its evidence.

At a glance

verdict
Not yet tested
Argusic Score
not scored yet
recorded runs
0
last tested
-
stars
296
forks
26
open issues
22
watchers
3
size
31 MB
created
last push

Subject data from GitHub, linked at the top of this page, refreshed . Test data by Argusic (CC BY 4.0); every number links to a run page with the full log, the recording, and their sha256 hashes.

Also tested, in the same area

Every one of these was installed and run by Argusic on a clean machine. Nothing appears here that was not tested.

Run history

No recorded runs.

Topics (from GitHub)

agent-securityalignmentclaude-codecoding-agentscursorfactory-aigemini-clihooksllm-as-a-judgemcpopaopencode

Embed the badge

Markdown for the project README. It links back here; terms on the terms page.

[![Tested by Argusic](https://argusic.com/badge/cupcake.svg)](https://argusic.com/subject/cupcake)

Questions

Does cupcake run?
cupcake has not been fully verified yet. No recorded run has produced a verdict yet.
How did Argusic test cupcake?
On a fresh, disposable machine, with every command recorded. 0 attempts are recorded, and the full method is on the methodology page.
Where is the evidence for cupcake?
All 0 recorded runs are on this page, each linking to its full log and terminal recording, stored with a sha256 fingerprint so it cannot be quietly altered.

Discussion