Agent Governance Toolkit

OWASP Agentic Top 10 enforced from YAML policy through two API surfaces, with denials bridged to Grafana

Agent Governance Toolkit OWASP Agentic Top 10 enforced from YAML policy through two API surfaces, with denials bridged to Grafana Governance boundary Agent · tool + LLM calls · Architecture component Agent tool + LLM calls Decorator API · @govern · Governance boundary · inline Decorator API @govern inline Middleware API · pipeline hook · Governance boundary · wrap Middleware API pipeline hook wrap YAML Policies · declarative rules · Architecture component · OWASP Agentic Top 10 YAML Policies declarative rules OWASP Agentic Top 10 Governance Engine · evaluate + decide · Governance boundary · allow / deny Governance Engine evaluate + decide allow / deny Metric Bridge · denial counters · Architecture component Metric Bridge denial counters Grafana · policy dashboard · Architecture component Grafana policy dashboard load policy denials Legend Backend Security Cloud

Policy as Code

  • • OWASP Agentic Top 10 mapped to YAML rules
  • • One engine, two ways to attach: decorator or middleware
  • • Every call resolves to allow or deny

Observability

  • • Denials become metrics via the bridge
  • • Grafana shows what policy stopped and why

Architecture diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export