Open Agent Primitives: Run enterprise AI agents securely

Open Agent Primitives (OAP) is a platform for running enterprise AI agents in your own cluster on models you choose, where the platform rather than the model checks every action before it runs. It ships implementations of six primitives—agent definitions, safe tools, credential brokering, authorization, channels and memory—with controls such as per-action permission checks, injected credentials the model never sees, and signed hash-chained audit logs verifiable offline with `oap audit verify`. The material also maps OAP's coverage against the OWASP Top 10 for Agentic Applications, listing four substantial and six in-progress items with remaining gaps noted.