LockedCode – Security-hardened OpenCode fork

LockedCode is a security-hardened fork of OpenCode, adding a comprehensive security layer between the LLM's intent and the agent's execution. It includes static scanning, shell command interception, outbound DLP, prompt injection detection, dependency vetting, and an immutable audit trail, all with zero performance overhead. Designed for enterprises using self-hosted or open-source models, it enforces security at every layer—writes, executes, sees, reads, installs, and extends—and provides governance features such as policy engine, trust scoring, model provenance tracking, and compliance reports.