CopilotKit open-sourced OpenBot, one policy gateway in front of every agent action.

3,364 stars since its August 17 creation. Every action against a computer, file, MCP server or UI component routes through a single gateway that resolves the target, decides it against policy, writes an audit row, then acts or refuses while naming the rule. Each bot gets its own container with its own Chromium, logins and workspace. Agents arrive over AG-UI rather than a framework binding, so LangGraph, Mastra, CrewAI, Pydantic AI and Google ADK agents connect identically. It's alpha, and its .env.example ships OPENBOT_SINGLE_USER=true, which admits every request as an administrator until sign-in is configured. Read that line before you deploy it. (GitHub)