Control Plane
Praxom
"Is this action safe?"
Intercept, validate, and enforce every agent action before it executes — even if the agent has been compromised.
Design principle: assume breach.
Get a DemoAttestation Ledger
proposed_action
slack.send_message(channel="#public", data=user_export.csv)
agent_claims (ignored)
"Sending harmless notification to the team."
model_state
PII Detected: user_export.csv contains unmasked SSN and Email fields.
verdict
DENY
ed25519 signature + prev-hash
sig_5K2y8zP9L... · hash_prev: 8f9a2b...
Watch the gate work
Three actions. Three verdicts. Keep scrolling.
Attestation ledger — live
proposed_action salesforce.bulk_export(all_contacts) → external-webhook.io
agent_claims "Routine backup sync." (ignored)
model_state Touches PII · destination outside org · irreversible
verdict DENY · Policy PS-011 · fail-closed
proposed_action billing.refund(customer_id=C-1029, amount=$18,500)
agent_claims "Customer requested a refund." (ignored)
model_state Refund cap for this agent: $500
verdict REWRITE · amount → $500 · original preserved in attestation
proposed_action email.send(list="all-customers", template=apology_draft)
agent_claims "Proactive communication." (ignored)
model_state Mass outbound · reputational blast radius · reversible: no
verdict ESCALATE · Held for human approval · notified #agent-approvals
✓
Policy Decision Point
ALLOW / DENY / REWRITE / WARN / ESCALATE on every agent action. Fail-closed — if policy cannot evaluate, the action is blocked.
✓
JSON Predicate Engine
10 operators, compound all/any rules, glob matching, 60s cache. Evaluates in microseconds.
✓
Formal SHACL Constraints
Business rules as formally verifiable graph shapes — not just best-effort policy.
✓
Action Rewrite Engine
Cap values, mask fields, set defaults before execution — without blocking the action.
✓
Signed Attestation Store
Ed25519-signed, hash-chained at creation. Append-only — no record can be modified after the fact.
✓
Identity Adapter
ABAC trust levels. AWS IAM, Azure MSI, and SPIFFE/SVID workload identity integration.
✓
FinOps Token Gating
Hard cost ceilings per agent, per workspace, per month. Runaway LLM bills are impossible.
✓
SDK Wrappers
Drop-in for LangGraph, AutoGen, and CrewAI. One line of code to protect your agent swarm.
Disasters We Prevent
Praxom catches catastrophes in mid-air.
Real scenarios. Real consequences. Real prevention.
praxom · finance · knight-capital-prevention
# Agent: algo-trader-v2 · Trust: delegated_external
> place_trade(symbol="AAPL", shares=50000, type="MARKET_BUY")
[EVALUATING] policy: finops.max_trade_value
[DENY] Action blocked.
Notional ($8.5M) exceeds agent ceiling ($100K).
[ATTESTED] praxom-att-a8f2e1ca · Ed25519 · signed
Knight Capital lost $440M in 45 minutes. This cost $0.
praxom · retail · air-canada-prevention
# Agent: support-bot-v3 · Identity: support_tier1
> issue_credit(user_id=8492, amount=1500.00, reason="bereavement")
[EVALUATING] policy: cs.refund_limits
[REWRITE] Amount: $1,500.00 → $250.00 (agent hard cap)
[ISSUED] Credit applied: $250.00 (approved)
[ATTESTED] praxom-att-b3e05c10 · Ed25519 · signed
Air Canada paid ~$650 for lack of a policy. Yours won't.
praxom · data-security · pii-intercept
# Agent: analytics-bot · Target: users_prod
> query_db("SELECT * FROM users WHERE churned = true")
[EVALUATING] policy: data.pii_masking
[WARN] PII columns detected: ssn, dob, email
[REWRITE] SHA-256 masking applied to ssn and dob before execution.
[ATTESTED] praxom-att-d1c08f33 · Ed25519 · signed