Zero Trust for Agentic Systems — trust, safety, and security for agents. @mvpzone
The Agents Carry the Gateway
The plan was to put the gateway at the front door. Users reach the agents through an assistant app, and the app can be bound to a managed gateway, so every request would pass through it.
What May Sit in the Hot Path
The team is building its own decision point for agent traffic: a small service that a load balancer calls on every request to an agent or tool we own, and which answers allow, deny or something in between. In a component like that, the obvious features are all AI features. Let a model draft the rules. Let a model judge the borderline calls. Let the enforcer understand the request.
A Record for Every Attempt
The reference deployment first ran in a production project in observe mode. The run finished with zero errors. Every act the deployment exists to show, including a tool outside the allow-list, a dangerous prompt and a search against an English-language rule, went through. Each one also left a record saying it would have been denied.