For me it s always one of these:
Payments / billing (spend real money)
Exports / data pulls (leak customer data)
Infra / ops (spin up compute, delete, deploy)
PIC Standard adds a machine-verifiable Action Proposal before any high-impact tool call.
Schema + verifier. If trust/evidence is insufficient, it fails closed and blocks the action.
Question: In your stack, what s hardest to make safe?
Hey Product Hunt 👋 I’m Fabio, maker of PIC Standard: AI Action Firewall.
Yes, the viral hook is “stop prompt injection from triggering tools”… but PIC is bigger than prompt injection.
PIC is a general standard for governing agent side-effects. Open Source, Apache 2.0.
Any time an agent is about to call a tool with real impact (💸 money, 🔐 privacy/data export, ☁️ infra/compute, irreversible ops), PIC forces a machine-verifiable contract before execution:
The agent must produce an Action Proposal (PIC/1.0 schema + verifier)
It ties together: intent → impact class → provenance → claims → evidence → exact tool call
If trust/evidence is insufficient → fail-closed and block the action
v0.4.1 supports deterministic, resolvable SHA-256 and Ed25519 Signature evidence (evidence IDs can point to real artifacts)
Why this matters: guardrails mostly focus on what the model says. PIC focuses on what the agent can do.
If you are building agents with tools, I would love feedback:
Which tool actions should be “high impact” by default?
What integration should be next after LangGraph + MCP?
Try it quickly (CLI + examples in the repo):
If PIC resonates:
⭐ Star the repo so other agent builders find it.
🤝 Contributors welcome, especially for new impact classes (email, billing, CRM export) and integrations (CrewAI next).
Repo: https://github.com/madeinplutofabio/pic-standard