Agent Policy SpecificationEnforce policies on AI agent interactions.

A vendor-neutral standard for intercepting and enforcing policies on every message, tool call, and model response — before any side effect occurs.

Input Policy

Evaluate messages before they reach the LLM. Block, redact, or transform content at the boundary.

Intercept tool invocations before execution. Enforce allowlists, validate arguments, prevent unsafe operations.

Evaluate model responses before delivery. Redact sensitive content, block unsafe outputs, audit everything.

Write policies declaratively in Rego (OPA-compatible) or programmatically in TypeScript and Java.

Not tied to any agent framework, LLM provider, or cloud platform. Works wherever your agent runs.

Five decision types — allow, deny, redact, transform, audit — that compose to cover any enforcement scenario.