One function intercepts all proposed actions.
Execution only proceeds if the policy allows it.
import { PolicyEngine } from "@oxdeai/core";
import { OxDeAIGuard, OxDeAIDenyError } from "@oxdeai/guard";
// 1. Initialize the policy engine
const engine = new PolicyEngine({
policy_version: "v1.0.0",
engine_secret: process.env.OXDEAI_ENGINE_SECRET,
authorization_ttl_seconds: 60,
policyId: "policy-production-v1",
});
// 2. Create a guard — the Policy Enforcement Point
const guard = OxDeAIGuard({
engine,
getState: () => getAgentState(),
setState: (s) => setAgentState(s),
trustedKeySets: [myKeySet], // trust is explicit, not implicit
onDecision: (record) => auditLog(record),
});
// 3. Every action goes through the guard
try {
await guard(
{
name: "charge_wallet",
args: { amount: 100, currency: "usd" },
context: { agent_id: "agent-001" },
},
async () => chargeWallet(100) // only runs if ALLOW
);
} catch (err) {
if (err instanceof OxDeAIDenyError) {
// DENY — execution did not occur
}
}
import { verifyAuthorization, createVerifier } from "@oxdeai/core";
// Inline: strict mode requires trustedKeySets
const result = verifyAuthorization(artifact, {
mode: "strict",
trustedKeySets: [myKeySet],
expectedPolicyId: "policy-production-v1",
});
// A valid signature from an unknown issuer → still fails closed
// Missing trustedKeySets in strict mode → TRUSTED_KEYSETS_REQUIRED
// Bound verifier: pre-configure trust once, reuse everywhere
const verifier = createVerifier({
trustedKeySets: [myKeySet], // required, non-empty
expectedIssuer: "oxdeai-pdp",
});
// Verify envelope produced by the engine after a run
const envelopeResult = verifyEnvelope(envelopeBytes, {
mode: "strict",
trustedKeySets: [myKeySet],
expectedPolicyId: "policy-production-v1",
});
if (envelopeResult.status === "ok") {
// audit trail is intact and cryptographically verified
}
import { createDelegation, verifyDelegationChain } from "@oxdeai/core";
// Parent agent delegates narrowed authority to a child agent
const delegation = createDelegation(parentAuth, {
delegatee: "child-agent-002",
scope: {
tools: ["provision_gpu"],
max_amount: 300n, // strictly narrowed from parent
},
expiry: parentAuth.expiry, // cannot exceed parent
kid: "key-001",
privateKey: signingKey,
});
// Child verifies full chain before execution
const chainResult = verifyDelegationChain(delegation, parentAuth, {
now: Math.floor(Date.now() / 1000),
trustedKeySets: [myKeySet],
requireSignatureVerification: true,
consumedDelegationIds: usedIds, // replay prevention
});
if (chainResult.ok) {
// execute within delegated scope
}
