Governance control plane
Every agent action passes through one gate.
Nothing else exists.
Mandate intercepts every tool call an AI agent makes, evaluates it against policy before execution, and produces a signed, independently verifiable receipt. Unauthorized actions cannot execute — not because of convention, but because no other path exists.
Four steps. No exceptions.
Agent requests a tool call
The LangChain adapter intercepts the invocation before it reaches the external tool. A signed ExecutionRequest is assembled — agent ID, tool name, risk level, parameter hash, session ID.
Gateway evaluates against policy
The Execution Gateway forwards to the Policy Engine (OPA + Rego). Every registered policy is evaluated in under 5ms. The result is one of three outcomes: APPROVED, DENIED, or REQUIRE_APPROVAL.
Decision is enforced
APPROVED actions execute. DENIED actions are blocked immediately. REQUIRE_APPROVAL actions pause execution and surface a context-rich card to a human operator with a countdown timer (default: 10 min, then auto-denied).
Receipt is generated and sealed
Every terminal state — approved, denied, timed out, terminated — produces a signed receipt containing execution_id, agent_id, tool, decision, policy_ref, and decided_by. Stored to Walrus: content-addressed, append-only.
Nothing above the gateway is trusted.
Nothing below it is trusted either.
The LLM, the agent framework, and the SDK adapter are all treated as untrusted — they can hallucinate, contain bugs, or be manipulated. Trust starts at the gateway.
Nothing above the gateway is trusted.
The security perimeter begins at the Execution Gateway. Everything above it — the LLM, the agent framework, the SDK adapter — is treated as potentially compromised.
Every decision is sealed.
Every terminal state — approved, denied, timed out, terminated — produces a signed receipt stored on Walrus. Externally verifiable. Immutable. No receipt can be deleted or modified after creation.
This receipt is externally verifiable without Mandate infrastructure.
One taxonomy. Three outcomes. No exceptions.
See the gate hold.
The console shows every decision live — approved, denied, held for a human, sealed to a receipt.