Open Source Software Library

HOL Guard is local-first runtime control for AI agents. Installed on the machine, it can gate shell, secrets and file reads, MCP server changes, and plugin or skill installs, then route risky actions through local approvals and receipts. Apache-2.0 freeware. Maker HOL. Homepage https://hol.org/guard. Windows installer and source available. It is not a cloud gateway and not a complete prompt-injection preventer.

Koha is the world's first free and open-source integrated library system. Canadian public and academic libraries have been among its largest adopters and contributors, with Canadian companies providing support and development.

Blob-level caching solution for ActiveRecord models.

ActiveJob extension for interruptible and resumable background jobs.

Notification Utils is an open-source project or repository maintained by Canadian Digital Service in Canada.

Open-source software project maintained in a public source repository.

Open-source development project maintained in a public source repository.

Open-source software project maintained in a public source repository.

An Indy Tails Server is file server that is designed to receive, store and serve Hyperledger Indy Tails files. Indy tails files are generated by an issuer of Indy AnonCred verifiable credentials when a Revocation Registry is created and must be published to a location accessible by all holders that receive a credential referenced in that Revocation Registry. The generated file is static, it does not change, and the credential holders use the tails file to produce a zero-knowledge proof of non-revocation about their credential and include it when responding to a proof request with a proof that includes claims from a revocable credential. If you are new to Indy AnonCreds Revocation, please review this document to understand how Indy revocation works, and where tails files fit in. An Indy Tails Server is a customized file server that makes it easy for AnonCred Issuers to publish tails files and for holders to access those tails files. A tails file does not have to be published to an Indy Tails Server, they can be published anywhere as long as there exists a URL accessible to all holders to access the tails file. If holders are mobile iOS or Android apps, the URL must use SSL (e.g. must be https:) due to the restrictions in those OS's. Support for publishing tails files to an Indy Tails Server is built into Aries Cloud Agent Python.

Tools and policy checks that help Government of Canada teams evaluate IBM Cloud deployments against common cloud guardrails. It is useful for repeatable compliance reviews, documentation of security expectations, and sharing implementation patterns across departments.

Open Policy Agent guidance and configuration examples for checking Google Cloud Platform services against Government of Canada cloud guardrails. The repository documents recommended settings and gives teams a reusable starting point for compliant GCP deployments.

PowerShell-based tooling for assessing Microsoft Azure environments against Government of Canada cloud guardrail requirements. Although archived, it remains a useful reference for Azure compliance automation and policy-as-code patterns.

Infrastructure and policy examples for checking Oracle Cloud deployments against Government of Canada guardrails. It provides reusable guidance for teams that need to document cloud compliance controls in Oracle environments.

Minimum guardrails and practical guidance for preventing ransomware in Government of Canada environments. The project is useful as a policy and control reference for security teams reviewing digital services.

A self-hosted control server compatible with Tailscale clients and WireGuard networking.