bla / website
llms.txt5.8k starsChanged 3 days agoMITView on GitHub
Open-source adversarial Blue Defense MCP server (31 tools), CLI, and bundler plugin toolkit engineered to protect 26 software release artifact formats against AI reverse-engineering agents (such as morluto/rea, Ghidra/IDA/Hopper MCP workflows, and autonomous coding agents). Ranked #5 Repository of the Day worldwide on GitHub Trending. MIT licensed. BLA shifts reverse-engineering economics via surgical token exhaustion, parameterized Mixed Boolean-Arithmetic (MBA) instruction substitution, shadow business-logic entanglement, and runtime integrity bindings (selfSeal + sidecarEntangle) — while preserving 100% runtime equivalence.
Trending
More talk lately.thin dataabout the whole repository
Who's talking about qybaihe/bla
- @todaystopainews.bsky.social“BLA: Adversarial defense shield for binaries, Electron apps, JS bundles, Python, and WebAssembly against AI …”Bluesky · Nov 8, 2026 · 2 likes
- morluto/rea“feat(obligations)!: add reviewed retire disposition for generated obligations”GitHub · Nov 8, 2026 · 1 reactions
- morluto/rea“[Design] Add bypass for BLA”GitHub · Nov 8, 2026
- ProSkillsMD/proskills“[Candidate] qybaihe/bla/.agents/skills/blind-llm-agents - blind-llm-agents”GitHub · Nov 7, 2026
- roomedia/ax-trend“qybaihe 'bla' — AI 리버스 엔지니어링 에이전트를 막는 방어막, Poison·Exhaust·Hallucinate 3층 (11/4, GitHub)”GitHub · Nov 4, 2026
The biggest 5 of 11 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 11
Talked about on GitHub and Bluesky (11 times).
On GitHub · 10
- Nov 8, 2026feat(obligations)!: add reviewed retire disposition for generated obligations — morluto/rea1 reaction · 2 comments
- Nov 8, 2026[Design] Add bypass for BLA — morluto/rea0 reactions
- Nov 7, 2026[Candidate] qybaihe/bla/.agents/skills/blind-llm-agents - blind-llm-agents — ProSkillsMD/proskills0 reactions · 1 comment
- Nov 4, 2026qybaihe 'bla' — AI 리버스 엔지니어링 에이전트를 막는 방어막, Poison·Exhaust·Hallucinate 3층 (11/4, GitHub) — roomedia/ax-trend0 reactions
- Nov 2, 2026Trending radar 2026-W45 — xabierlameiro/the-last-dance0 reactions · 1 comment
5 more on GitHub
- Nov 2, 2026Promo kit — week of 02 Nov 2026 — pahadiji/star-catcher0 reactions
- Oct 31, 2026【开源自荐】BLA:防 AI 自动逆向的软件构建产物加固工具 — GitHubDaily/GitHubDaily0 reactions
- Oct 31, 2026[开源自荐] BLA:防 AI 自动逆向的软件构建产物加固工具 — 521xueweihan/HelloGitHub0 reactions
- Oct 31, 2026【开源自荐】BLA:防 AI 自动逆向的软件构建产物加固工具 — ruanyf/weekly0 reactions
- Oct 31, 2026contrib: BLA verify evidence-split patch (heuristic / runtime / empirical) — Elysia20220909/artex-JP-plus0 reactions · 1 comment
On Bluesky · 1
- Nov 8, 2026BLA: Adversarial defense shield for binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse‑engineering agents like… — @todaystopainews.bsky.social2 likes and reposts · 1 reply
In this repository3 other files it gives its agents.
- AGENTS.mdAGENTS.md
- website/llms-full.txtllms.txt
- blind-llm-agentsSkill
The file
Files
# BLA (`bla-agents`) — Blind LLM Agents > Open-source adversarial Blue Defense MCP server (31 tools), CLI, and bundler plugin toolkit engineered to protect 26 software release artifact formats against AI reverse-engineering agents (such as `morluto/rea`, Ghidra/IDA/Hopper MCP workflows, and autonomous coding agents). Ranked #5 Repository of the Day worldwide on GitHub Trending. MIT licensed. BLA shifts reverse-engineering economics via surgical token exhaustion, parameterized Mixed Boolean-Arithmetic (MBA) instruction substitution, shadow business-logic entanglement, and runtime integrity bindings (`selfSeal` + `sidecarEntangle`) — while preserving 100% runtime equivalence. ## Quick Start ```bash # Register BLA's MCP server & skill across Claude Code, Cursor, Codex, Windsurf, Gemini CLI, or Antigravity npx bla-agents@latest setup -y # Auto-discover and harden build artifacts in one command npx bla-agents@latest harden . # Verify defense invariants or run the 14-target showcase benchmark npx bla-agents@latest verify ./dist npx bla-agents@latest benchmark ``` ## Key Pages - [Overview](https://bla.tools/): Architecture, Counter-REA defense pipeline, supported formats, and live repository status. - [Get Started](https://bla.tools/get-started/): One-command MCP setup, CLI reference (`harden`, `defend`, `audit`, `lint`, `protect`, `verify`, `emit-headers`), and Vite/Rollup/Webpack/esbuild bundler plugins. - [Benchmarks](https://bla.tools/showcase/): Reproducible 14-target Counter-REA Showcase Benchmark results (~1,000x+ aggregate token amplification, 100% runtime equivalence). - [Technical Guides](https://bla.tools/guides/): Deep-dive guides on Electron ASAR/IPC protection, WebAssembly & native ELF/Mach-O/PE hardening, Python/SQLite/GGUF/Safetensors shields, and Agent-Driven Weave (`bla_weave_plan` / `bla_verify_weave`). - [Public CrackMe Lab](https://bla.tools/crackme/): Public verifiable CrackMe challenges (`challenge/v6`–`v9`) with cryptographic `SEAL.json` commitments. - [FAQ & Honesty Boundaries](https://bla.tools/faq/): Performance impact, supported formats, and BLA's strict Honesty Red Line (what client-side hardening solves vs. server-side authorization). - [Enterprise Hardening](https://bla.tools/enterprise/): Custom adversarial assessment, CI/CD integration, and enterprise hardening engagements. ## Technical Reference & Schemas - [Full LLM Technical Reference](https://bla.tools/llms-full.txt) - [GitHub Repository (`qybaihe/bla`)](https://github.com/qybaihe/bla) - [npm Package (`bla-agents`)](https://www.npmjs.com/package/bla-agents) - [Configuration JSON Schema (`bla.config.v1.json`)](https://bla.tools/schemas/bla.config.v1.json) - [Signed Defense Manifest Schema (`defense-manifest-v1.json`)](https://bla.tools/schemas/defense-manifest-v1.json)
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

