Zero Trust for Agentic Systems — trust, safety, and security for agents. @mvpzone
The Purchase Completed. There Was No Order.
A supervised purchase ran end to end. The agent built the cart, a human approved the cart mandate, the flow resumed and the run finished. No error. No retry. No warning in the log. The order view said: order not available.
What May Sit in the Hot Path
The team is building its own decision point for agent traffic: a small service that a load balancer calls on every request to an agent or tool we own, and which answers allow, deny or something in between. In a component like that, the obvious features are all AI features. Let a model draft the rules. Let a model judge the borderline calls. Let the enforcer understand the request.
A Record for Every Attempt
The reference deployment first ran in a production project in observe mode. The run finished with zero errors. Every act the deployment exists to show, including a tool outside the allow-list, a dangerous prompt and a search against an English-language rule, went through. Each one also left a record saying it would have been denied.