Introduction
get-started / v1
- Wrap
- Inspect
- Frozen-mode decision: ok / repaired / degraded / bypassed / blocked
- Audit artifact
- Optional feedback
The API drift firewall for AI agents
Wrap the tool call between your agent and a third-party API. Inspect request and response evidence, freeze a mode for that call, and keep the upstream result unless a verified selective repair or policy refusal applies. Shape drift that would reject upstream can pass through or refuse under policy; semantic drift that would return wrong data must not invent a write. Local SDKs and execution hosts exist. The default engine detects nothing until explicitly configured. No hosted product or production traffic qualification is claimed.
Modes and decisions
A mode (observe, repair, or strict) is configuration resolved before the call runs and frozen through completion—later configure updates cannot rewrite that call. A decision (ok, repaired, degraded, bypassed, or blocked) is only what that call produced. The two closed sets are not interchangeable; the full matrix lives on Modes.
Scope and limits
AGINDOW is not a vendor credential manager or a promise that every write is correct. Findings, verified patches and metered incidents carry different evidence. The current default guest has no selective repair output. Audit delivery needs an explicit host sink and local queues can be lost. Durable replay and hosted delivery are unavailable.
Specification
Read the governing contract and the related guide.