Runtime security for developers and AI agents. EDAMAME watches what code does on your machine — not what it claims to be. It detects credential harvesting, C2 beaconing, and temp-directory execution through behavioral invariants that hold across every supply chain attack variant. Four independent detection layers, 60-second cycles, zero configuration. Proven against Trivy, LiteLLM, and axios hacks. Free, open source, works on macOS/Windows/Linux.