A policy decision point that wraps any tool call your agent makes — human-in-the-loop enforcement with the audit trail to support SB 26-189 documentation and record-retention obligations. Sub-120ms decision target. Cryptographic receipts. TypeScript SDK. Apache-2.0. Reference implementation of the BASIS standard.
// wrap any tool call. that's it. import { Cognigate } from "@vorionsys/cognigate-sdk"; const client = new Cognigate({ apiKey: process.env.COGNIGATE_API_KEY, }); const { result } = await client.governance.evaluate( "agent-123", "Read customer data from the sales database" ); // → result.decision: ALLOW · DENY · ESCALATE · DEGRADE // every decision recorded as a hash-chained proof.
// A FEW LINES · WORKS WITH ANY AGENT FRAMEWORK
Most "agent safety" tools are post-hoc — they log what happened. Cognigate decides what happens. Five things, every call.
Verify agent identity (signed nonce, mTLS, OIDC — your choice). No anonymous calls reach a tool. Cryptographic, not header-based.
// gate verifies before evaluating caller: "agent:claude-procurement" sig: "ed25519:9f2a…b41c" attest: "basis://aa/T3/2026.04.18"
Match the requested action against the agent's declared scope and your runtime policy. WASM-compiled — same policy runs in the gate, in the SDK, in your CI lints.
policy: market-scout: allow: - db.read("orders", "trades") - db.write("orders", max_rows: 10) deny: - db.write("customers") - net.outbound("*")
Rate limits, blast radius caps, time-of-day windows, kill-switch checks. All declarative. All per-agent. Hot-reload without restart.
Return ALLOW (with a scoped, expiring capability token) or DENY (with a structured reason). Some calls escalate to a human; the SDK surfaces it as an awaitable.
Append to the chain. Cryptographic, append-only, replayable. AgentAnchor reads it for tier attestation. Aurais reads it for security telemetry.
Design targets for the reference gate — single-region, default policy, no caching tricks. These are the budgets we build to; measure your own deployment.
Authorize + sign + return, end to end. The budget we design the reference gate to.
Tail-latency budget — under the threshold for any user-facing flow.
Per gate node. Linear horizontal scale. Zero shared state.
Cloud SLO. Self-hosted depends on your ops.
A full conformance + unit suite. Pass to claim T3 readiness.
// UNTIL THEN: THE ENGINE IS A REST/OPENAPI SERVICE — ANY HTTP CLIENT WORKS. API REFERENCE →
Apache-2.0. Self-host or use the cloud. Conformance suite is free, forever.
Cognigate