Add oleg-vdv/kepil to Security

README.md

@@ -3948,6 +3948,7 @@ Tools for conducting research, surveys, interviews, and data collection.
 - [CTRLRun/ctrlrun](https://github.com/CTRLRun/ctrlrun) [![CTRLRun/ctrlrun MCP server](https://glama.ai/mcp/servers/CTRLRun/ctrlrun/badges/score.svg)](https://glama.ai/mcp/servers/CTRLRun/ctrlrun) 🐍 🏠 - Execution safety for AI agent actions. `ctrlrun mcp-operator` exposes the approval queue as tools (`list_pending_approvals`, `approve`, `deny`, `resolve`, plus `receipts`, `effects`, `stats` and `inspect_action`), so the human who has to answer a held action answers it from the assistant they are already in; read tools answer without a credential and write tools refuse without one that names a person. Separately, the gateway proxies any MCP server so every tool call is checked against a YAML policy before it runs: allow, hold for a human, or deny. Approvals are single-use and bound to the hash of the exact action, one logical effect runs at most once across processes and hosts, and an unknown outcome is recorded AMBIGUOUS rather than FAILED so a blind retry is refused. Every attempt leaves a hash-chained JSON receipt. Apache-2.0. `pip install ctrlrun`
 
 - [Drumworks/ssid-mcp](https://github.com/Drumworks/ssid-mcp) [![Drumworks/ssid-mcp MCP server](https://glama.ai/mcp/servers/Drumworks/ssid-mcp/badges/score.svg)](https://glama.ai/mcp/servers/Drumworks/ssid-mcp) 📇 ☁️ - MAC-address (OUI) vendor lookup and router default-login directory for AI agents. Identify a device manufacturer from its MAC address, detect randomized/private (locally-administered) addresses instead of reporting "unknown", or fetch a router's default login IP and admin credentials — every router field cited to the manufacturer's own documentation. Free tier, no signup. `npx -y ssid-mcp`
+- [oleg-vdv/kepil](https://github.com/oleg-vdv/kepil) [![oleg-vdv/kepil MCP server](https://glama.ai/mcp/servers/oleg-vdv/kepil/badges/score.svg)](https://glama.ai/mcp/servers/oleg-vdv/kepil) 🐍 🏠 - Accountability layer for AI agents: a passport per agent version, a per-job mandate (allowed actions and systems, spending limits, expiry), a fail-closed gate that checks every action before a model is called, and an append-only hash-chained journal verified by a separate implementation in another language. Irreversible actions stop and wait for a person: the server deliberately has no confirm tool.
 
 ### 🌐 <a name="social-media"></a>Social Media