Privacy.Md

A privacy boundary for personal AI agents, enforced before the data leaves your machine.

---

When an agent acts for you, every tool call is a data transfer, and nobody checks any of them. Your agent has become a data controller that was never told the rules.

`privacy.md` is where you tell it. You write the rules in plain English, one per line. A kernel reads the compiled form and checks every outbound call against it *before* the call goes out, so the task still completes with less of you in it.

Every earlier attempt at this asked the recipient to behave. P3P had sites declare their own data practices, and they declared whatever got them through. Do Not Track asked them to honour a header, and almost nobody did. This enforces at your own boundary, so nobody's cooperation is required.

Install

Not on npm yet, so run it from a clone. Node 20 or newer:

git clone https://github.com/snoels/privacy.md
cd privacy.md/src && npm install && npm link

privacy.md init       # write your privacy.md and compile it
privacy.md install    # register the hook in your agent runtime
privacy.md demo       # the whole thing, seven acts

Without `npm link`, every command below is `node bin/cli.js ` from `src/`. Once the package is published,