NAAb Ecosystem · MIT License

Sovereign data gateway
zero PII leakage

NAAb Passage sits between your application and untrusted systems. It validates schemas, detects PII, and enforces policies — ensuring sensitive data never reaches LLMs, APIs, or third-party services.

Get Started Documentation
$ git clone --recursive https://github.com/b-macker/naab-passage.git
100%
Detection Rate
<0.01%
False Positives
3
Compliance Standards
0
PII Leakage

Core Capabilities

Enterprise-grade data protection

Every request validated, every response checked. No PII escapes. No schema bypassed. No exceptions.

Sovereign Architecture

NAAb owns all decisions. Polyglot workers are "dumb muscle" — they execute, they don't decide. No worker can override the gateway.

Self-Synthesizing

Compiles worker binaries at boot time with SHA-256 verification. Forensic shredding on shutdown. No pre-built binaries to tamper with.

PII Detection

SSN, credit cards, emails, phone numbers, API keys. Risk scoring with configurable thresholds. Blocks requests exceeding limits.

🔒

Schema Enforcement

Strict JSON schema validation. Unauthorized fields rejected. Anti-smuggling prevents payload injection attacks.

Hardware Isolation

CPU pinning, network namespaces, memory isolation. Designed for hostile cloud environments where the infrastructure itself is untrusted.

Compliance Ready

HIPAA, GDPR, SOC2 compliant out of the box. Audit logging, data lineage tracking, and retention policies built in.


How It Works

Validate, detect, enforce

Every request passes through three stages before reaching its destination.

Request Flow
① Schema Validation
  Verify JSON structure against whitelist
  Reject unauthorized fields
  Block smuggling attempts

② PII Scanning
  Scan all string values for PII patterns
  Score each detection (SSN=100, email=20)
  Sum risk score against threshold

③ Policy Enforcement
  Risk > threshold? BLOCK
  Risk < threshold? PASS
  Log everything for audit trail
Terminal
$ ./naab/build/naab-lang main.naab

NAAb Passage Gateway v1.0.0
Listening on :8091

[PASS] Clean API request
  Schema: valid | PII: none | Risk: 0

[BLOCK] PII detected in request
  SSN: 123-45-6789 (score: 100)
  CC:  4532-****-9010 (score: 80)
  Total risk: 200 > threshold 90

[BLOCK] Schema smuggling attempt
  Unauthorized field: "internal_key"

NAAb Ecosystem

Part of something bigger

NAAb Passage is built on the NAAb polyglot language. Every tool in the ecosystem uses the best language for each task.


Protect your data pipeline

NAAb Passage is open source, MIT licensed, and ready to deploy.

View on GitHub NAAb Language