Thanks to some recent high profile agent containment failures, I've made the difficult decision to release something I've been working on a bit early. I say difficult because I had a couple CFPs in for conferences this fall and was in licensing discussions, but this is better for the community. The CUSTODY framework helps standardize nomenclature around agentic risk and provides pillars for containment. Instead of needing to write pages about your agent for me to understand what's what, you can say "L4/Operational/R2" and I can immediately know the types of risk your agent creates. The framework is vendor agnostic and uses a machine-readable schema suitable for operating (and containing) at agentic speed.
https://www.custody-framework.org/
https://github.com/malwarejake/CUSTODY-framework
Jake Williams
npub1td…3m87v
2026-08-03 20:14:32 UTC
Author Public Key
npub1tdhytknt93um3pympngl3jqkd8k9ma7meuj6n4p3clz3amztxyes23m87vSeen on
wss://relay.momostr.pinkPublished at
2026-08-03 20:14:32 UTCEvent JSON
{
"id": "65c82a0c8a4960652d81e4bb0d9b537e5f92a825aee1981303b33037266b1c53",
"pubkey": "5b6e45da6b2c79b8849b0cd1f8c81669ec5df7dbcf25a9d431c7c51eec4b3133",
"created_at": 1785788072,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@malwarejake/117033407117498999",
"web"
],
[
"proxy",
"https://infosec.exchange/users/malwarejake/statuses/117033407117498999",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/malwarejake/statuses/117033407117498999",
"pink.momostr"
],
[
"-"
]
],
"content": "Thanks to some recent high profile agent containment failures, I've made the difficult decision to release something I've been working on a bit early. I say difficult because I had a couple CFPs in for conferences this fall and was in licensing discussions, but this is better for the community. The CUSTODY framework helps standardize nomenclature around agentic risk and provides pillars for containment. Instead of needing to write pages about your agent for me to understand what's what, you can say \"L4/Operational/R2\" and I can immediately know the types of risk your agent creates. The framework is vendor agnostic and uses a machine-readable schema suitable for operating (and containing) at agentic speed.\n\nhttps://www.custody-framework.org/\n\nhttps://github.com/malwarejake/CUSTODY-framework",
"sig": "7bedfb3d67501a3c49c5e0ac64fc4e8d2fd37045fafca44e16945fba8321082a1c4097a5eabb60f6d7860d91023f76e6fd5d70108a7ef9c8f0855b256d10a3df"
}