Intutic — The Circuit Breaker for AI Agents

Real-time security, secret DLP, and loop burn prevention for autonomous AI coding agents.

Quickstart • Architecture • Key Features • Supported Harnesses • Docs

💡 Why Intutic?

Existing AI observability tools (like LangSmith or Portkey) are passive. They record execution logs after an agent leaks a secret, deletes files, or loops into hundreds of dollars of API spend.

Intutic is an active, low-latency circuit breaker. It sits in the tool-call path between your AI agents and local shell/production APIs. Every tool execution passes through a sub-5ms policy evaluation chain — blocking dangerous commands before they run and steering agentic loops in real time.

🏗️ Architecture

Intutic runs as a high-performance local or self-hosted proxy (written in Rust) alongside a lightweight bidirectional config sync daemon (sync-daemon):

flowchart TD
    subgraph DevEnvironment[" 💻 Developer Environment "]
        Agent["🤖 AI Coding Agent<br><i>(Claude Code, Cursor, Aider, LangGraph)</i>"]
        SOP["📝 Local SOP Rules<br><i>(CLAUDE.md / .cursorrules / SKILL.md)</i>"]
    end

    subgraph HotPathProxy[" ⚡ Intutic Hot-Path Proxy (:4000) "]
        Engine["🔒 WASM Policy Engine<br><i>(&lt;5ms Evaluation Latency)</i>"]
        DLP["🔐 Secret DLP & Masking"]
        PCAS["🛡️ PCAS Action Primitives<br><code>BYPASS</code> | <code>ENHANCE</code> | <code>HIJACK</code> | <code>KILL</code>"]
    end

    subgraph SyncDaemon[" 🔄 Sync Daemon "]
        Reconcile["Bidirectional Config Reconciler<br><i>(Harness Config Sync)</i>"]
    end

    subgraph UpstreamProviders[" 🌐 Upstream Providers "]
        Providers["Anthropic API / OpenAI / LiteLLM / Ollama"]
    end

    Agent -->|1. Tool Call / Prompt| HotPathProxy
    SOP -->|2. Rule Sync| Reconcile
    Reconcile -->|3. Hot-Reload Rules| Engine
    HotPathProxy -->|4. Clean Request| UpstreamProviders
    Engine -->|5. Block/Hijack Verdict| Agent

⚡ 30-Second Quickstart

1. Install the CLI & Native Proxy Gateway

# Install global CLI and native Rust proxy binary
npm install -g @intutic/cli @intutic/proxy

# Or run the native proxy directly on-demand
npx @intutic/proxy

2. Connect Your Workspace

Run intutic connect inside your project folder. This boots the local high-speed Rust proxy on port 4000 and auto-detects installed coding assistants:

intutic connect

3. Route Any Agent to Intutic

Point your favorite LLM client or agent framework to the local proxy:

# Anthropic SDK / Claude Code append /v1/messages themselves — host only, no /v1
export ANTHROPIC_BASE_URL="http://localhost:4000"
export OPENAI_BASE_URL="http://localhost:4000/v1"

That's it! Your agent is now governed by real-time safety guardrails.

🔥 Key Features

🛡️ The 4 PCAS Primitives

Every tool call and prompt evaluated by Intutic produces one of four PCAS Action Primitives:

 ┌──────────┐  ┌───────────┐  ┌────────────┐  ┌──────────┐
 │  BYPASS  │  │  ENHANCE  │  │   HIJACK   │  │   KILL   │
 └────┬─────┘  └─────┬─────┘  └─────┬──────┘  └────┬─────┘
      │              │              │              │
      ▼              ▼              ▼              ▼
 Direct Pass    Inject Safety  Redact Secrets   Hard-Abort
 (<1ms Overhead) Context SOP    or Swap Args     Runaway Loop

1. BYPASS: Standard safe execution passes through natively (<1ms overhead).
2. ENHANCE: Inject contextual SOP prompt rules or architectural guidelines.
3. HIJACK: Substitute dangerous tool parameters or redact secrets on the fly.
4. KILL: Hard-abort execution thread if an agent attempts destructive file/git ops or hits loop caps.

🔌 Supported Harnesses & Frameworks

Intutic ships 18 harness adapters that are auto-detected and config-synced without modifying your agent's source code. Anything else that speaks an OpenAI- or Anthropic-compatible API is governed the same way by pointing its base URL at the proxy:

📝 Write Your First SOP

Intutic governance rules are written in standard Markdown files inside your repository root (CLAUDE.md, .cursorrules, or .windsurfrules). Intutic automatically syncs and enforces them in real time:

# Standard Operating Procedure (SOP): Safety Guardrails

## Rules
1. **No Secret Leaks**: Agents must never output raw API keys or passwords.
2. **File Boundaries**: Restrict file modifications to the current project directory.
3. **No Force Push**: Block `git push --force` on all branches.

## Denied Commands
- `rm -rf`
- `DROP TABLE`
- `TRUNCATE`

💬 Interactive Slash Commands

Because Intutic evaluates prompts pre-flight, you can run interactive governance commands directly inside your agent chat:

/intutic status   # View active session spend and compliance score
/intutic rules    # List active WASM & Markdown SOP rules

📚 Documentation & Community

• 📖 Developer Portal & API Reference: docs.intutic.ai
• 🏗️ Architecture & Contributor Guide: info.md
• 🛠️ WASM Rules SDK: packages/wasm-sdk/
• 📦 NPM Package Suite:
  • @intutic/cli — Developer onboarding CLI
  • @intutic/proxy — Native Rust proxy binary wrapper
  • @intutic/clawde — Programmatic TypeScript client SDK
  • @intutic/mcp-governance-proxy — Stdio JSON-RPC MCP proxy
  • @intutic/shared-types — Zod-validated shared TypeScript types

⭐ Star Us On GitHub

If you find Intutic useful, please give us a star on GitHub! It helps us support more agent harnesses and policy engines.

🏢 Enterprise & Commercial Licensing

For custom VPC deployments, enterprise-grade SSO/SAML, dedicated SLA support, or team compliance auditing, visit intutic.ai or contact us at [email protected].

📄 License

This project is licensed under the MIT License.