| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-06-17 | 1.1 kB | |
| v0.11.0 -- first public release source code.tar.gz | 2026-06-17 | 197.3 kB | |
| v0.11.0 -- first public release source code.zip | 2026-06-17 | 287.8 kB | |
| Totals: 3 Items | 486.2 kB | 0 | |
First public release of Doberman — an adaptive authorization layer for coding agents.
:::bash
pip install doberman-core
The distribution is doberman-core (the bare doberman name on PyPI belongs to an unrelated, abandoned project). The import name and CLI are unchanged: import doberman / doberman --help.
Included
- Tool mediation + decision engine — every tool call → allow / authenticate / block
- Objective guardrail: path confinement, destructive-command, external-destination, secret-pattern, and smuggled-token-channel rules
- Subjective guardrail: adaptive behavioral baselines + OOD/homoglyph token signals; universal subjective layer (SL1–SL9)
- Roles & boundaries, capability discovery, tiered auth (confirm → TOTP → scoped elevation)
- Local redacted audit log, policy-drift & poisoning defense, turn gate (pre-inference prompt-injection screening)
- Suite-agnostic ASR/FPR benchmark harness
doberman servestdio MCP proxy runtime
Apache-2.0 · standalone with no proprietary dependency (CI-enforced) · published via PyPI Trusted Publishing (OIDC).