Gateway
One choke point for every tool call. OPA runs as a service beside it.
AI security × IAM · Open Policy Agent
Who is your AI agent acting for?
Five tool calls. Follow each one through the policy and watch it get allowed, held or blocked.
Scenarios
Asha asks the agent:
“Summarise today's inbox”
Click any node
Policy · Wasm
OPA · agent.authz
Loading policy.wasm…
Deploy
Same policy, three places to run it
Sidecar
OPA in the same pod as each tool service. Decisions over localhost.
WebAssembly
The policy compiled into the process: edge, browser, or this page.
Doesn't fixintentprompt injection itselfa runtime that lies about context