pipelab-org/pipelock v3.7.0 is an open-source AI agent firewall written in Go. FACTS lists the latest release as v3.7.0, but the changes in this version are not given. The project aims to inspect HTTP, WebSocket, MCP and A2A traffic between agents and networks to block data exfiltration, SSRF and prompt injection.
The firewall does more than inspect traffic: it also produces an execution receipt (action receipt) signed by the intermediary. This makes it possible to check the record outside the agent and verify what decision was made. The key point is that the component mediating the network leaves the record. The repository is licensed under Apache-2.0, and FACTS records 931 stars. Of 3944 Go files, 2507 are test files; there are 103 internal subpackages and 174 docs documents.
That said, there are limits to what the signature guarantees. According to the README, the demo uses an ephemeral key, so it cannot attribute the signer's identity. Since the operator holds the signing key, the receipt alone cannot prove the operator's honesty either. The benchmark uses a Gauntlet workflow with a pinned public corpus, but it does not publish scores automatically. Therefore, performance superiority is hard to judge from public materials alone.