foundry-agt

What problem does it solve?

This Skill prevents Foundry hosted agents from performing unsafe or noncompliant actions by enforcing deterministic, pre-execution policy checks outside the LLM.

Core Features & Use Cases

• Policy Engine for Tool/Action Control: Load YAML policies and evaluate them before tool execution to allow or deny actions.
• Capability Allow/Deny Guardrails: Constrain which tools can be called, with explicit denied capabilities for destructive operations.
• Tamper-evident Audit Trail: Produce hash-chained audit records and support CloudEvents export for compliance workflows.
• Starter Governance Policies: Includes ready-to-use default, HITL gate, and PII-deny policy files for common Foundry governance scenarios.

Quick Start

Use the foundry-agt references and policies by wiring the build_governed_agent factory into your Foundry hosted-agent module and loading the references/policies directory for deterministic allow/deny enforcement.