Tool Call Governance Chain

Every ADK-ported tool call clears four governance gates before it runs

Tool Call Governance Chain Every ADK-ported tool call clears four governance gates before it runs 01 / Agent 02 / Policy Gates 03 / Inspection & Approval 04 / Execution EX / Denied Agent · emits tool call · Agent · intent Agent emits tool call intent Policy · allow-list check · Policy Gates · gate 1 Policy allow-list check gate 1 DLP Scan · sensitive data · Inspection & Approval · gate 2 DLP Scan sensitive data gate 2 Approval · human gate · Inspection & Approval · gate 3 Approval human gate gate 3 OPA · rego decision · Policy Gates · gate 4 OPA rego decision gate 4 Denied · returned to agent · Denied Denied returned to agent Tool Fn · ADK-ported function · Execution · runs Tool Fn ADK-ported function runs forbid Legend User UI Agent logic Policy Tool action Context / trace

The Chain

  • • Policy allow-list is checked first
  • • DLP scans arguments for sensitive data
  • • Approval is a first-class human gate
  • • OPA evaluates a final rego decision

Fail Closed

  • • Any gate can deny the call
  • • A denial returns to the agent, never the function
  • • The tool function only runs after all four pass

Why It Matters

  • • Governance is code around the tool, not prompt text
  • • The same wrapper fits any ADK-ported function
  • • Each gate is independently testable

Workflow diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export