<p align="center">
	<img src="https://raw.githubusercontent.com/lelu-auth/lelu/main/platform/ui/public/logo.svg" alt="Lelu logo" width="120" />
</p>

# Lelu

> **WARNING — NOT PRODUCTION READY**
>
> This repository contains early-stage code, prototypes, and research features. It is not production ready.
> Do not use this code for production workloads without following the `docs/PROJECT_PLAN.md` remediation steps.

### Quick Risks

- Missing hardened deployment defaults (secrets, TLS, IAM)
- Incomplete integration and e2e test coverage
- Migration and backup procedures not validated for production
- Operational monitoring and runbooks are minimal

See `docs/PROJECT_PLAN.md` for the required work to reach production readiness.

## About the Project

Lelu is a framework-agnostic authorization engine for AI agents. It combines policy evaluation, confidence-aware controls, runtime risk checks, and human-review workflows in one system.

It is designed so teams can ship agent features faster without weakening security.

Out of the box, Lelu provides:

- Confidence-aware authorization
- Prompt-injection prefiltering
- Human-in-the-loop review queue
- Runtime risk evaluation
- Short-lived (JIT) scoped tokens
- Audit trail and incident hooks
- SQLite local storage (works offline)
- PostgreSQL for production deployments

## Why Lelu

Authorization for AI agents is still a half-solved problem. Most tools handle static rules but do not account for model uncertainty, dynamic risk, and operational safety in one flow.

Lelu solves this by making decisions through a layered pipeline:

- Injection check
- Confidence resolution and gate
- Policy evaluation (YAML or Rego)
- Risk evaluation
- Most-restrictive final decision merge

This helps teams avoid over-permissive agent behavior while keeping developer workflow simple.



## Documentation

For comprehensive guides, API references, and examples, visit:

**[https://lelu-ai.com/](https://lelu-ai.com/)**

Topics covered:
- Getting started and installation
- SDK usage (TypeScript, Python, Go)
- Policy configuration (YAML and Rego)
- Authorization flow and architecture
- Observability and monitoring
- Production deployment guides
- API reference

## Contribution

Lelu is free and open source under the MIT License.

You can support the project by:

- Contributing code
- Suggesting features
- Reporting bugs and issues
- Improving documentation and examples

See [CONTRIBUTING.md](CONTRIBUTING.md) and [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md).

## Security

If you discover a security issue, please report it privately to:

`security@lelu-ai.com`

Reports will be reviewed promptly and handled responsibly.

## Support

- Documentation: [https://lelu-ai.com/](https://lelu-ai.com/)
- GitHub Issues: [https://github.com/lelu-auth/lelu/issues](https://github.com/lelu-auth/lelu/issues)
- Discussions: [https://github.com/lelu-auth/lelu/discussions](https://github.com/lelu-auth/lelu/discussions)
- Email: support@lelu-ai.com

## License

MIT. See [LICENSE](LICENSE).
