Airlock Extensions
IDE enforcer extensions and CLI for Airlock — the cryptographically enforced approval gateway for AI agents.
These extensions intercept AI agent actions before execution and route them through a mobile approval flow, ensuring no sensitive or high-impact action runs without an explicitly signed human decision.
Airlock Approver (mobile app): App Store · Google Play
HARP (Human Authorization & Review Protocol)
Airlock implements HARP — the Human Authorization & Review Protocol — a standards-grade, cryptographically verifiable authorization layer for AI agents.
What HARP provides
- Binding — Approvals are cryptographically bound to the exact artifact (e.g. command or prompt) that was reviewed.
- Verifiable decisions — Ed25519-signed decisions; replay and substitution are rejected.
- E2E encryption — Artifact payloads can be encrypted (AES-256-GCM) so gateways stay zero-knowledge.
- Interoperability — Open schemas, test vectors, and conformance criteria for cross-vendor use.
HARP specs in this repo
This repository includes a HARP specification draft suite (v0.2) under samples/harp/:
| Area | Location | Description |
|---|
| Core | samples/harp/src/spec/core/ | Artifact canonicalization, hashing, decision signing, replay protection |
| Gateway | samples/harp/src/spec/gateway/ | HTTP binding, artifact submit, decision wait, schemas |
| Prompt / Session | samples/harp/src/spec/prompt/, session/ | Prompt and session message types |
| Infrastructure | samples/harp/src/spec/infrastructure/ | KEYMGMT, THREATMODEL, TRANSPORT, COMPLIANCE |
| Governance | samples/harp/src/spec/governance/ | Governance and lifecycle |
Enforcers and the CLI align with HARP-CORE (artifact hash, decision verification, E2E encryption), the Gateway HTTP binding, and HARP key/encryption practices. See samples/harp/src/spec/README.md for the full spec layout.
Extensions
Shared Capabilities
All enforcers provide:
- 🔒 AI action interception before execution
- 🔐 AES-256-GCM artifact encryption (ECDH key exchange during pairing)
- ✍️ Ed25519 signature verification of mobile approver decisions
- 📱 Workspace pairing with mobile approver (QR code + text code)
- 📊 Quota monitoring via Gateway (subscription status)
- 🔗 Presence tracking via WebSocket
- ✏️ Workspace rename — sync name changes to gateway via WebSocket or REST
- 🔄 Token refresh for long-running sessions
Claude Code Plugin
The Claude Code enforcer plugin is included in this repository:
👉 Claude Code Enforcer — install via /plugin marketplace add airlockapp/extensions
Repository Structure
aporthq
Myr-Aya
railyard-dev
microsoft
pegasi-ai
empathic