What problem does it solve?
This Skill prevents Foundry hosted agents from performing unsafe or noncompliant actions by enforcing deterministic, pre-execution policy checks outside the LLM.
Core Features & Use Cases
- Policy Engine for Tool/Action Control: Load YAML policies and evaluate them before tool execution to allow or deny actions.
- Capability Allow/Deny Guardrails: Constrain which tools can be called, with explicit denied capabilities for destructive operations.
- Tamper-evident Audit Trail: Produce hash-chained audit records and support CloudEvents export for compliance workflows.
- Starter Governance Policies: Includes ready-to-use default, HITL gate, and PII-deny policy files for common Foundry governance scenarios.
Quick Start
Use the foundry-agt references and policies by wiring the build_governed_agent factory into your Foundry hosted-agent module and loading the references/policies directory for deterministic allow/deny enforcement.