Runtime Enforcement
Governed execution of HTTP and MCP operations after policy pass.
POST /runtime/execute evaluates policies, then executes the action if allowed. Two modes: http_proxy for HTTP requests and mcp_proxy for MCP tool calls.
Enforcement flow
- Resolve agent identity and verify agent key
- Evaluate policies against input context
- Check agent allowlists (tools, resources)
- If allowed, execute via HTTP proxy or MCP proxy
- Write audit log and return result with execution payload