# Lilytrap

> Lilytrap plants decoy code, credentials and agent "handoff" notes in build output via a GitHub Action, and alerts the owner (and their coding agent) when anyone uses a decoy. It runs inside the customer's CI and never receives their source code.

## Setup

- [setup.md](https://lilytrap.dev/setup.md): complete, agent-executable setup instructions and API reference. An agent can do the entire setup without a human, apart from one optional token for the GitHub hand-off.

## Product

- [Home](https://lilytrap.dev/): what Lilytrap does, the 2026 Hugging Face agent-swarm incident, and the data boundary.