Watch how MAREF governs AI agents — from quick look to full product intro.
Your agents are breaking things.
And you have no idea.
88% of enterprises reported AI agent incidents last year. Not because agents are unruly; because nobody set the rules. MAREF is the governance OS that gives every agent a constitution.
Your agents are already out of control.
This isn't hypothetical. It's what agents are doing to real companies right now.
The question isn't 'will AI be safe?'. It's 'when your agent breaks something, who stops it?'.
Install MAREF. It's like 8 security gates for your agents.
Every action your agent takes passes through MAREF automatically.
| What you worry about | How MAREF solves it | How it feels |
|---|---|---|
| Agent suddenly deletes files | 3 consecutive anomalies trigger auto-circuit-break + 30s cooldown | "It tried. The brakes stopped it before I noticed." |
| Agent calls wrong APIs | Identity → Permission → Audit, 0.3s per call | "I don't even feel it checking." |
| No idea what your agents are doing | Immutable log: every operation signed and traceable | "Open the log. Everything it did is right there." |
| Compliance audit coming up | SM2/SM3/SM4 cryptography, ISO-ready out of the box | "Auditor shows up. Export the report. Done." |
Before: watch your agent for 10 hours afraid it will break something.
After: go to sleep.
You're not buying a tool.
You're buying a voice in the next era.
MAREF is open source and free. The real value isn't the code — it's the rules that define how agents behave in your world.
World's first governance-native agent framework
Not a security add-on. Governance is the product.
TLA+ formally verified
Lyapunov convergence, Sperner completeness — we don't 'believe' it's safe. We proved it.
National-grade cryptography
SM2/SM3/SM4. ISO-ready. Zero-compromise compliance.
Everyone's building agents. You're building the rules they answer to — and that's where the next era is won.
Think MAREF is too much? Start with Lite.
You don't need to write a state machine. One command, instant governance.
docker run maref/lite One command to start
12 pre-configured governance rules Works out of the box
Auto-block high-risk operations No need to define 'what's risky'
Links with your risk scan results Scan finds issues → Lite auto-hardens
Six layers — Governance at the center.
Application
/ 应用层Multi-agent framework integration surface. Interoperable with any agent framework.
Orchestration
/ 编排层Task decomposition and distributed transaction coordination across agents.
Governance
/ 治理层Governance-first gate. Every agent action passes through before execution.
Safety
/ 安全层Screenshot redaction, input filtering, file sandboxing, clipboard sanitization.
Observability
/ 可观测层Full telemetry, immutable action recording, and real-time monitoring.
Infrastructure
/ 基础设施层Deployment substrate. Sidecar injection, K8s-native, serverless-ready.
Every tool call.
Every decision. Signed and verified.
MAREF sits between your agents and everything they touch — intercepting threats, cryptographically signing every decision, and evolving defenses in real time.
8-Layer Defense Architecture
Red attack arrows enter from left, penetrating layer by layer — intercepted at Layer 5 Safety Gate
Four technologies. One guarantee: your agents stay safe.
Gray Code state machines, 8-layer defense, self-evolving governance, and national-grade cryptography. Pick any three. You won't need the fourth — you'll already be covered.
Gray Code FSM
A state machine that mathematically proves your agents can't enter unsafe states. Not 'probably safe.' Provably safe.
8-Layer Defense
Defense in depth. 4-tier decision tree. 97% of safety decisions automated. If one layer fails, the next catches it.
Recursive Evolution
Lyapunov-proven convergence — your governance gets provably safer over time. FNR -60% over 200 rounds of self-evolution.
National Cryptography
SM2/SM3/SM4-GCM. Full GB/T 32918 compliance. Pure Python, zero native deps, fully auditable.
Gray Code State Machine
Hamming distance = 1 on every transition. Mathematically verifiable governance.
Why MAREF?
7 critical dimensions across 6 agent frameworks
| Dimension | MAREF MAREF v0.30.0 | LangGraph LangGraph | CrewAI CrewAI | AutoGen Microsoft AutoGen | OpenAI OpenAI Agents SDK | Anthropic Anthropic Tool Use | Manual Manual Governance |
|---|---|---|---|---|---|---|---|
| Formal Verification TLA+/Coq correctness proofs | 10 | 4 | 3 | 5 | 3 | 3 | 2 |
| Defense-in-Depth Multi-layer security architecture | 10 | 5 | 4 | 5 | 4 | 4 | 3 |
| Zero-Trust Architecture No implicit trust between agents | 9 | 3 | 2 | 3 | 4 | 4 | 5 |
| Gray Code FSM Hamming distance = 1 governance | 10 | 1 | 1 | 1 | 1 | 1 | 1 |
| Self-Evolution Lyapunov-proven convergence | 10 | 2 | 3 | 4 | 1 | 1 | 1 |
| National Cryptography SM2/SM3/SM4 compliance | 9 | 1 | 1 | 1 | 2 | 2 | 3 |
| Full Observability OpenTelemetry + immutable audit | 9 | 6 | 5 | 6 | 5 | 4 | 2 |
Lyapunov-Proven Convergence
FNR -60% over 200 self-evolution rounds. Mathematically proven.
Your agents are already working for you.
MAREF ensures they don't work against you.
Open source · Recursive evolution · Production ready · Apache 2.0 · 4,300+ tests · 82% coverage