CloakPipe

What it does

CloakPipe: Rust privacy proxy for LLM & RAG. Your data never reaches the LLM. Detects PII in <5ms, replaces with consistent pseudonyms (CloakTree), forwards sanitized request, rehydrates response instantly (SSE works). Single Rust binary. <5ms overhead. AES-256 vault (BYOK). No raw PII stored. Install: cargo install cloakpipe-cli && cloakpipe init && cloakpipe start MIT open source. Free self-host. GitHub: https://github.com/rohansx/cloakpipe Site: https://cloakpipe.co

Every hop of agent traffic gets a deterministic policy decision made outside the model, and every decision produces cryptographic evidence anyone can verify without trusting the operator. Redaction is just the first policy type.

CloakPipe is the verifiable privacy & policy control plane for AI-agent traffic. Every hop — prompt, tool call, tool result — gets a deterministic policy decision made outside the model, and every decision produces cryptographic evidence anyone can verify without trusting us . Redaction is just the first policy type. Everyone's audit trail is self-attested. CloakPipe anchors evidence outside operator control — a regulator, insurer, or opposing counsel checks it themselves, offline, without trusting CloakPipe or you. Hash-chained, signed records of every hop — PII types detected, what was masked, the policy applied, the decision made. Never the raw value. Chain heads anchored outside our…from cloakpipe.co

• 
  A MitM proxy to see what your LLM tools are sendingJan 2026 · github.com · ▲218

  I built this out of curiosity about what Claude Code was actually sending to the API. Turns out, watching your tokens tick up in real-time is oddly satisfying. Sherlock sits between your LLM tools and the API, showing you every request with a live dashboard, and auto-saved copies of every prompt as markdown and json.

• 
  Local Privacy Firewall-blocks PII and secrets before ChatGPT sees themDec 2025 · github.com · ▲111

  OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT&#x2F;Claude&#x2F;Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…

• 
  Covert – Rewrite of HashiCorp Vault Using Rust, SQLite and Litestream2023 · github.com · ▲54

  Contribute to fmeringdal/covert development by creating an account on GitHub.

• AL
  A local-first, reversible PII scrubber for AI workflowsDec 2025 · medium.com · ▲38

  Hi HN, I’m one of the maintainers of Bridge Anonymization. We built this because the existing solutions for translating sensitive user content are insufficient for many of our privacy-concious clients (Governments, Banks, Healthcare, etc.). We couldn't send PII to third-party APIs, but standard redaction destroyed the translation quality. If you scrub "John" to "[PERSON]", the translation engine loses gender context (often defaulting to masculine), which breaks grammatical agreement in languages like French or German. So we built a reversible, local-first pipeline for Node.js&#x2F;Bun. Here…

• 
  A Mutating Webhook to automatically strip PII from K8s logsMay 2026 · github.com · ▲25

  What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA&#x2F;Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK&#x2F;Datadog). 2. Entropy Detection: Uses context-aware entropy…

• 
  Regolith – Regex library that prevents ReDoS CVEs in TypeScript2025 · github.com · ▲27

  I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…

• 
  /dev/null▲490

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Run full iOS 16.5 firmware on Android Devices▲419

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 17h ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  Lightfield▲901

  AI-native CRM that builds itself and does work for you

  AI · Mar 2026 · lightfield.app

• 
  Tobira.ai▲728

  A network where AI agents find deals for their humans

  AI · Mar 2026 · tobira.ai

• 
  Claude Import Memory▲716

  Switch from ChatGPT to Claude with import memory feature

  AI · Mar 2026 · claude.com

• 
  Littlebird▲709

  Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.

  AI · Mar 2026 · littlebird.ai

• 
  Viktor.com▲702

  Your AI Coworker that proactively executes tasks

  AI · Mar 2026 · viktor.com

• 
  Jupid▲659

  File your taxes with Claude Code

  Commerce · Mar 2026 · jupid.com