190 个
本项目研究金融市场的统计特性、不同资产的收益行为、风险测度以及跨市场关联的量化方法，奠定量化研究的核心技能基础。This project investigates the statistical properties of financial markets, how different assets behave, how risk is measured, and how inter-market relationships can be quantified; building the core skills used in quantitative research.
提供清晰的分步指南，介绍如何在 Arch Linux 上结合 rEFInd 与 Nvidia 硬件启用带模块签名强制的 Secure Boot。Provide a clear, step-by-step guide to enable Secure Boot with module signature enforcement on Arch Linux using rEFInd and Nvidia hardware.
面向编程 Agent 的确定性业务变更安全闸门——基于证据的 BLOCK/ALLOW 决策。Deterministic business-change safety gate for coding agents — evidence-backed BLOCK/ALLOW decisions
受治理的持久化 AI worker，配备默认拒绝权限、人工审批、dry-run 以及经过认证的 MCP。Governed persistent AI workers with default-deny authority, human approvals, dry-runs, and an authenticated MCP.
基于 Base 的 fail-closed 支付安全判定：识别已知恶意钱包、高度相似 token 及反复 rug 的资方。非托管、仅依赖描述符——工具本身不转移资金。Fail-closed safe-to-pay verdicts on Base: known-bad wallets, look-alike tokens, repeat rug funders. Non-custodial, descriptor-only — no tool moves funds.
插入到 MCP 服务器前方的安全与可信代理——策略拦截、rug-pull 检测、JIT 审批、哈希链审计。124 个测试。MCP 서버 앞에 끼어드는 보안·신뢰성 프록시 — 정책 차단, rug-pull 탐지, JIT 승인, 해시 체인 감사. 124 tests
基于 TypeScript 的独立框架，通过统一原语 Component 组合安全的个人 AI agent：manifest-first 发现、能力授予、正交模型路由与信息流控制。Standalone TypeScript framework for composing secure personal AI agents from one universal primitive — the Component. Manifest-first discovery, capability grants, orthogonal model routing, and information-flow control.
针对 PX4 飞控软件的覆盖率引导事务语义审计研究 artifactResearch artifact for coverage-guided transactional semantic auditing of PX4 flight-control software.
CELLO protocol 的官方客户端——提供 MCP server 及面向 OpenClaw、NanoClaw、IronClaw、ZeroClaw 等 agent 变体的原生适配器。The official client for the CELLO protocol — MCP server and native adapters for OpenClaw, NanoClaw, IronClaw, ZeroClaw, and other agent variants
可验证混合 AI 执行的合约层 —— 研究预标准 0.36.0。A contract layer for verifiable hybrid AI execution — research pre-standard 0.36.0
Astro 静态站点，英意双语，安全设计（security-by-design），AI 辅助的月度 RAG 杂志。部署于 Cloudflare。Astro (static), bilingual EN/IT, security-by-design, AI-assisted monthly RAG magazine. Deployed on Cloudflare.
本仓库包含论文补充材料，旨在提升系统综述的透明度、可复现性与完整性，涵盖筛选文档、检索策略以及计算机视觉中物理对抗攻击的详细分析。This repository contains the supplementary materials accompanying our paper. The materials are designed to support the transparency, reproducibility, and comprehensiveness of the systematic review, including screening documentation, search strategies, and detailed analysis of physical adversarial attacks in computer vision.
为 AI agent 提供持久且安全约束的浏览器控制——使用语义化 CLI 替代 Playwright 脚本或屏幕坐标。通过统一接口，背后使用 macOS WKWebView 与 Linux ChromiumPersistent, safety-enforced browser control for AI agents — semantic CLI instead of Playwright scripts or screen coordinates. macOS WKWebView + Linux Chromium behind one contract.
大语言模型监督微调的反馈对齐方法Feedback alignment for supervised fine-tuning of large language models
本地 CLI，用于发现本地网络上的影子 MCP 服务器并审计认证状态。零遥测，纯本地。Local CLI to discover shadow MCP servers on your local network & audit authentication status. Zero telemetry, local-only.
Kiki — 一个面向 Google Campaign Manager 360 的开源对话式 trafficking 助手。集成 70 个 CM360 工具，具备写入安全确认、内置 QA 以及零凭证 MCP demo。Kiki — an open-source conversational trafficking assistant for Google Campaign Manager 360. 70 CM360 tools, write-safety confirmation, built-in QA, zero-credential MCP demo.
使用自然语言查询分析并比较 700+ DeFi 金库的风险评分，无需 API key 或安装Analyze and compare risk scores of 700+ DeFi vaults using natural language queries without requiring API keys or installations.
硕士论文（KCL）：在攻击者-机器留出划分下重新衡量 IoT 入侵检测，并测试基于 LLM 的报文预测是否能提升性能。移除泄露后，macro-F1 从 0.90 降至 0.60。MSc dissertation (KCL): re-measuring IoT intrusion detection under an attacker-machine holdout, and testing whether LLM-based packet prediction improves it. macro-F1 0.90 -> 0.60 once leakage is removed.
Shadow / Unmanaged API 的发现、分类、安全验证与可复现研究基准。Shadow / Unmanaged API discovery, classification, security validation, and reproducible research benchmarks
可执行真实操作的 AI agent 层级——shell、GitHub、邮件、采购——以代码编写（非配置）的审批底线（Latch）作为门槛。零依赖。A hierarchy of AI agents that take real actions — shell, GitHub, email, purchases — behind an approval floor written in code, not configuration (Latch). Zero dependencies.
可复现研究原型：面向有状态云服务的碳感知与 SLO 约束自动伸缩A reproducible research prototype for carbon-aware SLO-constrained autoscaling of stateful cloud services using synthetic workload traces, a threshold baseline, and a predictive risk-aware autoscaling policy.
应用型 AI 网络安全研究实验室，涵盖机器学习威胁检测、对抗机器学习、鲁棒性、网络威胁情报、MITRE ATT&CK/ATLAS、LLM 安全与可复现研究。Applied AI Cybersecurity research labs covering machine learning threat detection, adversarial ML, robustness, cyber threat intelligence, MITRE ATT&CK/ATLAS, LLM security and reproducible research.
面向系统综述数据抽取、证据定位与偏倚风险评估的冻结式（frozen）防泄漏基准。Frozen, leakage-aware benchmark for systematic-review data extraction, evidence localization, and risk-of-bias support
从零开始在 PyTorch 中构建 decoder-only Transformer，涵盖分词、预训练、监督微调，以及基于核心张量操作的对齐。Build decoder-only Transformers from scratch in PyTorch, covering tokenization, pretraining, supervised fine-tuning, and alignment using core tensor operations.
全栈量化研究平台：因子分析、系统化策略回测、真实交易成本建模、滚动前推 ML 验证、投资组合风险分析与稳健性测试，基于美股日频数据。为可复现研究而构建——非实盘交易。Full-stack quantitative research platform for factor analysis, systematic strategy backtesting, realistic transaction-cost modeling, walk-forward ML validation, portfolio risk analytics, and robustness testing on daily U.S. equity data. Built for reproducible research—not live trading.
用于探索 LLM Security 新兴研究主题的研究路线图与文献综述仓库。A research roadmap and literature review repository for exploring emerging research topics in Large Language Model Security.
本地优先的 CLI，用于评估 MCP server 的开销与能力，数据不离开本机。A local-first CLI that measures what an MCP server costs and what it can do. Nothing leaves your machine.
探索用于测试 ML、LLM 和 Agentic AI 系统的 AI 安全工具、论文与框架Explore AI security tools, papers, and frameworks for testing ML, LLM, and agentic AI systems
活文献综述：面向网络安全领域的现代数据架构Living literature review: Modern data architecture for cybersecurity
通过硬件 IP 核在硅层级抑制 LLM 幻觉，强制 LLM 输出的语义完整性Enforce semantic integrity in LLM outputs with a hardware IP core that suppresses hallucinations at the silicon level
为将 MCP 服务器推向企业部署的团队提供的实用 MCP 就绪、安全与无状态迁移资源。Practical MCP readiness, security and stateless-migration resources for teams moving MCP servers toward enterprise deployment.
基于 Semantic Scholar 与 Crossref 的安全加固、双模式学术搜索工作台。A security-hardened, dual-mode scholarly search workbench powered by Semantic Scholar and Crossref.
Agent 优先、安全优先的工具包，用于开发和定制 reMarkable Paper Pure 平板。Agent-first, security-conscious toolkit for developing and customizing reMarkable Paper Pure tablets
分析葡萄牙公共养老金体系历史融资的可复现研究包Reproducible research package analyzing the historical financing of Portugal's public pension system
纯 Go 实现的分布式列式 SQL 分析引擎——对 S3 上 Parquet 进行向量化执行，无需 JVM、无需 CGo。以 Trino 级别的能力提供相当性能，却只需极小资源占用。原生支持 IPv4/CIDR/MAC 等网络类型，适用于遥测和安全场景。Distributed columnar SQL analytics engine in pure Go — vectorized execution over Parquet on S3, no JVM, no CGo. Trino-class performance on a fraction of the footprint. Network-native IPv4/CIDR/MAC types for telemetry and security workloads.
即时评估课程资格，输出明确的通过/未通过结果以及定制化的入学测试。Instantly evaluate course eligibility with clear pass/fail results and tailored entry assessments.