FEATUREDComputing Life · Share (鸭哥 research reports)· rssZH00:00 · 08·04
→Perplexity open-sources Numbat to normalize agent behavior across Claude Code, Codex, and other clients into one security rule set
Engineers routinely use Claude Code, Codex, OpenCode, and others, but each tool has different hook names, log formats, and blocking capabilities, making unified security enforcement difficult. Perplexity open-sourced Numbat (Apache 2.0), a static Go binary that normalizes actions from different clients into five event types—command.exec, file.write, etc.—and applies 52 CEL rules for cross-client checks. Built-in rules default to monitor-only and automatically fall back to detect-only on complex commands to avoid breaking dev scripts. Numbat handles behavioral observation and detection normalization, not physical sandboxing; synchronous blocking for OpenCode is still unsupported, and its SQLite log parser remains deferred.
#Code#Perplexity#NVIDIA#OpenAI
why featured
Featured · importance 72 · hook + knowledge
editor take
Perplexity open-sourced Numbat, a Go binary that normalizes Claude Code, Codex, and OpenCode actions into 5 event types for cross-client security checks.
sharp
This one's worth opening because it hits a real pain point: teams juggle Claude Code, OpenCode, and Codex daily, but each tool has different hook names, log formats, and blocking capabilities. Unified security enforcement across them is a mess.
Numbat doesn't try to build yet another client. It sits between the tools and the OS, translating all actions into five event types—command.exec, file.write, and so on—then runs 52 CEL rules for cross-client checks. Built-in rules default to monitor-only, and it automatically falls back to detect-only on complex commands to avoid breaking dev scripts.
The limits are clear too: synchronous blocking for OpenCode isn't supported yet, and the SQLite log parser is still deferred. Numbat handles observation and detection normalization, not physical sandboxing. If your goal is preventing the agent itself from overstepping rather than blocking external attacks, this is worth tracking.
HKR breakdown
hook ✓knowledge ✓resonance —