Change a rule. Watch the verdict change.
This is the same evaluation path the gateway runs. Flip the rule below and the verdict, the terminal output, and the recorded block all follow from it.
Request
- agent
- —
- action
- —
- environment
- —
- origin
- —
Editable. Try ~/.aws/credentials.
Pipeline
- parse
- normalize
- secret detection
- risk classification
- policy evaluation
- approval check
- sanitization
- audit event
Secrets and risk resolve before policy — a rule may test risk >= HIGH, so the value has to exist first.
total—
Decision
—
sha‑256 —
prev —
Three views of
one decision.
The playground, the JSON output, and the system log are the same execution seen from three places. They cannot disagree.
Rule on — DENY
The action is refused before it runs. The caller gets the reason and the block number; it does not get the file.
Rule off — HOLD
Without an explicit allow, the execution is held for a human decision rather than passed through. Absence of a rule is not permission.
Either way, a block is written
A denied action and a held action both produce a record. The audit chain is not a log of successes.
Run this against your own policies
Start with the local control plane, then point it at your runtime.
Bring every agent
under control.
Set durable policy, preserve a verifiable record, and give teams a safer way to put intelligent systems to work.