Tessera
A provenance control plane for AI agents. Information-flow control over MCP: untrusted data cannot reach an exfiltration-capable or irreversible tool without passing a constrained declassifier or human approval. Provenance taint tracking over a trust lattice, tool blast-radius classification, macaroon-style attenuating capabilities, and a CaMeL-style plan interpreter.