Jozu secures AI artifacts from the supply chain through runtime. Security scan results, prompt guardrails, agent tool use policies, and human approvals are distributed as cryptographically verified OCI artifacts. Jozu enforces those policies and guardrails at the server, on the desktop, and at the edge, even in air-gapped environments. Untrusted agents and models run in isolated sandboxes with policies enforced at the boundary and kernel level. Built on CNCF KitOps, the most widely adopted open source AI packaging standard.