Yebo vs ValetFS

AI agents are becoming powerful enough to negotiate tasks, plan workflows, and interact with services across the internet. But when an agent reaches the moment where it needs to execute a real-world action such as sending a payment, committing to a contract, or triggering an external API . Developers need a reliable way to verify that the action is allowed before it happens. Yebo provides that control layer. Yebo acts as an authorization and orchestration system for AI agents and autonomous workflows. Developers connect their AI systems using a simple API, and when an agent wants to perform a sensitive action, the request is routed through Yebo first. Yebo evaluates the request against developer-defined policies, checking permissions, allowed capabilities, budgets, and execution conditions. If the request meets the policy rules, the action is authorized. If not, it is blocked automatically. This approach allows developers to safely connect AI agents to real-world systems without giving those agents unrestricted access. The AI continues to think, plan, and reason normally but any action involving payments, contracts, or protected services must pass through Yebo's verification layer. Yebo is designed to integrate easily with modern AI architectures, including agent frameworks and autonomous systems. Instead of redesigning their agents, developers simply add Yebo to the execution path, enforcing policies and maintaining full control over what actions are permitted. Every authorized action generates a verifiable execution record, allowing teams to review what the agent did and why it was approved. This maintains trust and accountability when deploying AI systems that interact with real services. AI agents can decide what to do. Yebo ensures those decisions are safe to execute.

Agents that read a repository issue, a web page or a tool description have been talked into reading credentials out loud. The key was never the target — the file it sat in was. A key written into a dotfile, an environment variable or a CI runner is readable by everything on that machine, forever, long after the job is done. ValetFS is the other way round. Your secrets live on your iPhone, in the Keychain, behind Face ID. When a tool on your computer needs one, ValetFS lends it — into memory, never to disk — and takes it back when you are finished. HOW IT WORKS • Install the ValetFS daemon on your computer and start it. It prints a QR code. • Scan the code with the app. The two are now paired. • Push a secret from your phone. It appears on the computer as an ordinary file that any tool can read — but it exists only in memory. • Close the app, and a grace timer starts. When it expires the daemon unmounts and wipes itself. Nothing is left behind on disk. END-TO-END ENCRYPTED Secrets are encrypted on your phone for one specific daemon, using X25519 key agreement and ChaCha20-Poly1305. The relay that carries them sees only ciphertext. We cannot read your secrets, and neither can anyone operating the infrastructure in between. BUILT FOR AGENTS Provision a session from the app and hand an AI agent a single connection key. The agent installs the daemon and joins — and you keep the authority to revoke it. One tap forgets the session, and a still-running daemon locks itself, unmounts, and wipes its memory. WHY NOT A CLOUD SECRETS MANAGER Federated identity solves this for workloads that run inside a cloud — they already have an identity to exchange for a short-lived token. Your laptop, your home server and the container your agent runs in have none, so they fall back to a file on disk. ValetFS gives that machine the thing it was missing: an authority that can say no, and that lives somewhere the machine cannot reach. NO ACCOUNT, NO TRACKING There is no sign-up and no login. No analytics SDK, no advertising, no behavioural tracking. The app is a client for infrastructure you can inspect — the daemon and the relay are both open source. REQUIRES A COMPUTER ValetFS is a companion to the ValetFS daemon, which runs on macOS or Linux and is a free open-source download. The app on its own has nothing to pair with. Daemon and source: https://github.com/WinM2M/valet-fs