Agent Security — decide before the tool runs

Agent Security is a policy layer between the agent runtime and integrations (email, tickets, APIs).

The runtime plans a tool call. The decide API evaluates it before side effects: allow, deny, or pending.
Allow executes. Deny blocks.

Pending goes to a human-in-the-loop queue. Decisions land on an append-only audit trail.

Not a prompt wrapper. A gate on the tool path.

Live page: https://alfanestlabs.com/agent-security

Product Hunt launch: tomorrow. I’ll post the hunt link here when it opens.

Happy to walk through the runtime flow.