Prempti is a new open source project from Sysdig that brings Falco's real-time detection engine into the AI coding agent tool-call lifecycle. It intercepts agent actions (file reads/writes, network calls, shell commands) before they execute and evaluates them against Falco YAML rules, returning Allow, Deny, or Ask verdicts. Running as a lightweight user-space service with no root or kernel modules required, it protects against credential access, sensitive path writes, pipe-to-shell attacks, and exfiltration attempts. It supports both guardrails mode (active enforcement) and monitor mode (observation only), and includes a Claude Code skill for drafting custom rules interactively.
Table of contents
Why this mattersWhat it doesHow it worksA new kind of visibility for AI-driven development1 Impression