Agent Runtime Controls
ACS Guardrail Demo
Problem. An agent’s proposed tool action needs explicit authority before it runs.
Implementation. Deterministic runtime controls, signed and scoped capabilities, and human approval bound to the tool action.
Technical implementation. Tenant and ancestor-chain revocation, with an optional approval–permit lifecycle. Supports immutable request snapshots, cooperative cancellation, commit fences, output gating and hash-chained audit records.
Boundary. Cancellation requires tool cooperation. Effects outside the managed commit boundary are not prevented. Revocation state is in memory. No production-readiness or full ACS-conformance claim.

