Yes. OpenShell secures the runtime environment. Trustabl hardens the tools the agents call inside that environment. TAA automatically generates least-privilege policies, egress rules, binary requirements, and sandbox compatibility metadata that OpenShell can consume directly. Together they deliver defense-in-depth: secure runtime + production-hardened tools.
Most tools are fully hardened in under 60 seconds. You connect your GitHub repo, and Trustabl scans, enriches, and generates most of the metadata automatically.
We're focused on the free remediation experience: GitHub Actions integration, expanded Skill.md support, and skills file scanning. Team governance and compliance features are planned for later.
Smarter models can describe tools better, but they cannot reliably harden them for production. Trustabl adds critical production-grade elements models cannot consistently provide: structured validation rules, circuit breakers, policy enforcement, cryptographic attestations, least-privilege OpenShell policies, and SLSA supply-chain provenance.
