Open-source agent governance
OPEN SOURCE · MITFirewalls, guardrails and MCP gateways sit around the agent: they see network traffic, prompts and tool names, but not whether a refund is legitimate or hijacked. The Hexgate SDK runs inside your agent and checks each tool call against your policy before it runs, for each user and in context, with no per-call round-trips. Every decision goes to an append-only audit log; the platform flags anomalies, suggests policy changes and gives you a kill-switch. Wrap your agent in one line. Works with OpenAI Agents, LangChain / LangGraph, Google ADK and Pydantic AI.
- →Inside the agent: each tool call is checked in-process against a deny-by-default policy, with no per-call round-trips
- →Rules that understand context: the user and their role, the tool and its arguments, the agent's state, time and environment
- →On the record: every verdict in an append-only audit log, with anomaly detection and a kill-switch

