You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> [**Read the project vision**](https://contextforge-org.github.io/contextforge-plugins-framework/docs/vision/) to learn why hooks, plugins, and policy are the path to agent security.
14
+
> [**Read the project vision**](https://contextforge-org.github.io/cpex/docs/vision/) to learn why hooks, plugins, and policy are the path to agent security.
Copy file name to clipboardExpand all lines: docs/content/docs/vision.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,7 +17,7 @@ Hooks are standardized interception points placed at every boundary where an age
17
17
18
18
This architecture deploys identically across the stack, inside LLM proxies, agent frameworks, and gateways. Each layer runs its own plugins. Prompt injection detection at the proxy. Tool authorization at the gateway. Data loss prevention at the agent.
19
19
20
-

20
+

21
21
22
22
---
23
23
@@ -31,7 +31,7 @@ Enforcement is a three-layer problem.
31
31
|**CMF** (Common Message Format) | What you evaluate. A protocol-agnostic context envelope carrying identity, security labels, delegation chains, and content. |
32
32
|**APL** (Attribute Policy Language) | How you define policy. Declarative, attribute-based rules with explicit effects. |
33
33
34
-

34
+

35
35
36
36
Hooks make enforcement **possible**. Policy makes it **usable**. Context makes it **correct**.
37
37
@@ -41,15 +41,15 @@ Hooks make enforcement **possible**. Policy makes it **usable**. Context makes i
41
41
42
42
Different policy types require different enforcement points. CPEX provides hooks at every layer, from soft stylistic policies enforced at the prompt level to hard compliance requirements enforced at infrastructure boundaries.
43
43
44
-

44
+

45
45
46
46
---
47
47
48
48
## How It Works
49
49
50
50
An application or framework invokes a hook at a critical operation boundary. The plugin manager dispatches registered plugins (sequentially, concurrently, or fire-and-forget) and returns a result. Plugins can **allow** execution to continue, **block** it with a violation, or **modify** the payload using copy-on-write isolation.
The plugin manager handles registration, ordering, timeouts, error isolation, and payload chaining. You get a deterministic enforcement pipeline with no surprises.
55
55
@@ -67,7 +67,7 @@ CPEX is under active development. The current Python framework is production-rea
67
67
68
68
-**Plugin catalog.** Discovery, versioning, and installation of plugins from registries. Multiple instances from a single manifest, managed through the CLI.
69
69
70
-
See the [GitHub milestones](https://github.com/contextforge-org/contextforge-plugins-framework/milestones) and [open issues](https://github.com/contextforge-org/contextforge-plugins-framework/issues) for details.
70
+
See the [GitHub milestones](https://github.com/contextforge-org/cpex/milestones) and [open issues](https://github.com/contextforge-org/cpex/issues) for details.
71
71
72
72
---
73
73
@@ -84,7 +84,7 @@ See the [GitHub milestones](https://github.com/contextforge-org/contextforge-plu
84
84
85
85
CPEX is part of the [ContextForge](https://github.com/contextforge-org) ecosystem.
0 commit comments