Bulwark

Wallet-agnostic security stack for AI agents on Solana.

Bulwark sits between an agent's LLM and its signer, decoding every proposed Solana transaction at the instruction level and enforcing the agent's declared policy as a non-negotiable ceiling. The LLM cannot override it.

We don't trust the LLM. We constrain what it can do.

Packages

Package	What it is	License
@bulwark/guard	TypeScript SDK that enforces transaction-level policy at the signer boundary.	MIT
@bulwark/probe	CLI that attacks a Solana agent endpoint with ~50 prompt-injection and policy-fuzzing payloads, emits an HTML report.	MIT
@bulwark/demo-agent	Deliberately-vulnerable Solana Agent Kit agent on devnet. Used for the hero demo. Not the product.	MIT

Quick start

Requires Node.js 20+ and pnpm.

pnpm install
pnpm build
pnpm test

Project status

Pre-release. Targeting the Solana Frontier Hackathon 2026 (deadline 11 May 2026).

License

MIT — see LICENSE.