Dashboard

Real-Time Autonomous Agent Workflow Security Copilot

System Online

Evaluated Actions 0

Baseline Allowed 0

Policy Denials 0

Guard Blocks 0

Bypass Neutralized NONE

Payroll Access Denial

Evaluates agent attempt to read sensitive payroll data through canonical file restrictions.

Target: payroll_records Policy: Restricted

Alternative Route Detection

Tracks objective memory when agent switches tools or database views to reach prohibited assets.

State: Denial-Aware Action: Blocked

Legitimate Continuity

Preserves valid unrelated workflows and authorized operations without broad false positives.

Status: Authorized Guard: Allowed

Workflow Execution Progression 0 Actions Ingested

Execute simulation to view action sequence nodes.

Action Ingestion Audit Stream Continuous Real-Time Verification

Step	Agent & Tool	Target Resource	Baseline	Workflow Guard
No actions ingested yet.

Local Security Analyst Report Zero Cloud Transmission (Local Meta Llama 3.2)

Select "Generate Report" to request an analytical breakdown from the local open-weight model.

Interactive Security Sandbox

Live Action Interception Tester for Evaluators

TEST ENGINE

Objective ID

Agent ID

Tool Name

Target Resource

Canonical Entity

Quick Fill Presets

Real-Time Interception Verdict

Stateful Pre-Execution Outcome

READY

Verdict Summary

Awaiting Execution

Click "Test Action Interception" to submit this custom action to the IntentFence workflow guard.

Baseline Policy

IntentFence Guard

Runtime Python Adapter GuardedToolProxy Boundary

from workflow_security.agent_adapter import GuardedToolProxy from workflow_security.guard import WorkflowGuard guard = WorkflowGuard(restricted_resources={"payroll_records"}) proxy = GuardedToolProxy(guard) # Pre-execution tool call interception result = proxy.execute_guarded(event, my_tool_callable, **kwargs)

Policy & Objective Memory Architecture Two-Tier Defense Model

Tier 1: Canonical Resource Policy

Maps file paths, database views, and API calls to canonical identities to stop alias-based evasion.

Tier 2: Denial-Aware Objective Tracking

Preserves state across operations. If an objective meets a denial, subsequent actions under that objective are blocked.

Audit Log & Compliance Subsystem

SQLite Persistent Records (data/intentfence.db) • 0 Records Persisted

ID	Run ID	Objective	Agent & Tool	Resource	Baseline	IntentFence Guard
Loading persisted audit records...