r/netsecstudents • u/opposum-0x7F8 • 9d ago
My projects for security research
Heyy everyone
Am working on two projects for making security research more declarative and agentic
**Cusimanse** — *Composable Security Research Framework*
Cusimanse is a declarative, composable YAML framework for agent-operated security research on disposable compute. It combines contracts, requirements, capabilities, policies, prompts, instrumentation, observability and evidence into reproducible research workflows.
**Decretum** — *Security Research Contract Compiler*
Decretum complements Cusimanse by providing a schema-driven contract layer: LinkML schemas define capabilities and boundaries, while YAML recipes describe execution. It compiles these into machine-readable contracts that can be consumed by research runtimes and harnesses.
Experiment with it,clone it,test it
Love your feedback and if you feel its worthy please star it
🔗 Cusimanse: https://github.com/Opposum0112/Cusimanse
🔗
Decretum: https://github.com/Opposum0112/Decretum
1
u/BitterlyCareful 9d ago
interesting concept, reminds me a bit of defining test suites in yaml for CI but for security research. the contract compiler angle is what caught my eye, feels like it could cut down on config drift when you're spinning up disposable VMs for testing. gave the repos a quick look, might clone and poke around this weekend