Platform

Policy that runs where the
action actually happens.

ForgeOS sits between your agents and production. Every call is evaluated, decided and recorded at the moment of execution — not reconstructed afterwards from logs.

enforcement coveragefail-closed

SDKin-process calls

HTTP gateservice to service

MCP proxytool invocations

Shadow scanundeclared agents

ALLOWagent.commandHOLDagent.commandBLOCKtool.proxyALLOWagent.executeBLOCKshell.guardHOLDtool.proxyALLOWagent.commandHOLDagent.commandBLOCKtool.proxyALLOWagent.executeBLOCKshell.guardHOLDtool.proxy

Prevent

Nothing reaches production without a verdict.

Every agent action is checked against policy before it touches production.
Destructive or sensitive commands require human approval, or they do not run.
Optional plan mode: declare, approve, then execute.

Govern

Evidence you can hand to an auditor.

A live inventory of every agent touching production, including ones nobody declared.
Tamper-evident evidence for every decision.
Ceilings and alerts on LLM spend before the invoice arrives.

Protect

Attacks absorbed before the SOC wakes up.

Probes and scans are absorbed and attributed, not left to reach production assets.
Fail-closed: if there is no verdict, the action does not run.
Optional host canary denies with EPERM — not a kill signal, not a zero-bypass claim.

Enforcement plane

Every verdict, on the path.

ALLOW, HOLD or BLOCK — decided within a <50ms p99 budget, attributed to an agent, and written to an append-only ledger.

forgeos · enforcement plane

01agent.command12msALLOW

02agent.command38msHOLD

03tool.proxy9msBLOCK

04agent.execute18msALLOW

05shell.guard11msBLOCK

06tool.proxy24msHOLD

Specifications

Built for regulated environments.

Deployment

On-prem, VPC or air-gapped

Latency budget

<50ms p99

Failure mode

Fail-closed by default

Integration

SDK, HTTP gate, MCP proxy, Shell Guard

Kernel Gate

Optional host canary (EPERM)

Evidence

Hash-chained decision ledger

Frameworks

Mapped to ISO 42001 · EU AI Act · NIS2