The Gateway
The action firewall
for AI agents.
One enforcement layer between every AI agent and every system of record. No exceptions. No direct API calls.
The Gateway
The action firewall
for AI agents.
Every sensitive action is routed through six checks — in real time, in the transaction path — before it ever reaches a system of record.
Gateway · live trace
latency < 100ms · fail-closedAgent requests
supplier.create()
01
Identity
Agent valid & unexpired
02
Policy
Tool & op permitted
03
Rate Limit
Within call budget
04
Data Rules
Residency & PII safe
05
Authority
Threshold & approval
06
Audit
Immutable evidence
Allowed
Action executes · receipt recorded
Denied
Blocked instantly · reason logged
Gated
Paused for human approval
Agent requests
supplier.create()
01
Identity
Agent valid & unexpired
02
Policy
Tool & op permitted
03
Rate Limit
Within call budget
04
Data Rules
Residency & PII safe
05
Authority
Threshold & approval
06
Audit
Immutable evidence
Allowed
Action executes · receipt recorded
Denied
Blocked instantly · reason logged
Gated
Paused for human approval
Allowed12ms · receipt #A8F2
agent:procurement.supplier_onboarder.v3
tool:erp.supplier.create()
Identity
Policy
Rate limit42/1000
Data rules
Authority< $5k threshold
Audit
Action executed · evidence sealed to immutable log
Denied4ms · alert sent
agent:procurement.bulk_pay.v1
tool:bank.transfer.execute()
Identity
Policynot in allowlist
Rate limit
Data rules
Authority
Audit
Blocked at policy check · agent quarantined pending review
Gatedawaiting approval
agent:finance.po_processor.v2
tool:erp.po.submit()
Identity
Policy
Rate limit
Data rules
Authority> $25k threshold
Audit
Awaiting: procurement_manager@co.com
Every AI agent action flows through the Gateway.
No exceptions. No direct API calls. No unmonitored actions.
Engineered for production
Built to sit in the transaction path.
Latency
< 100ms
Per action, p99
Posture
Fail-closed
Default deny on error
Retention
7 years
Immutable, sealable
Scope
Process-agnostic
Any workflow, any tool
Execution receipt
Every action leaves evidence.
A signed, cryptographically sealed record of what the agent requested, what the Gateway decided, and what the system of record actually did. Immutable by design.
- Hash of inputs and outputs — tamper-evident
- Ed25519 signature — provenance verified
- Full check trace — regulator-ready
receipt.json
{
"receipt_id": "rcp_01HN8X2K9T4MEQYF",
"timestamp": "2026-01-14T09:42:18.224Z",
"agent": "procurement.supplier_onboarder.v3",
"tool": "erp.supplier.create",
"outcome": "ALLOWED",
"checks": {
"identity": { "pass": true, "ms": 2 },
"policy": { "pass": true, "ms": 1 },
"rate_limit": { "pass": true, "used": 42, "limit": 1000 },
"data_rules": { "pass": true },
"authority": { "pass": true, "threshold_ok": true },
"audit": { "pass": true }
},
"inputs_hash": "sha256:9f3a...",
"outputs_hash": "sha256:7c1b...",
"seal": "ed25519:e8a4..."
}