BloomSpec
Entities

Agent Policy

A governance rule evaluated at the moment an agent attempts a tool call, resolving to block, filter, or flag for review.

Volume

Low; a curated, deliberately small rule set per tool/agent combination

Retention

Versioned — a policy change is itself a governance-relevant event

Entity attributes6
  • agent_policy_id
  • tool_scope
  • agent_scope
  • The authorisation model must be expressive enough to evaluate a policy against the specific tool being called and its arguments, not only against the calling user's role — role-based authorisation alone cannot express 'this agent may read this system but never write to it.'
  • resolution
  • version
Entity relationships1
Capability entities1
Entity lifecycle

Not yet researched

Only the control-bearing entities were modelled for lifecycle. Defensible as a starting point, but it does leave the entity model uneven, and this is incompleteness rather than a finding.

Glossary links1
Capability operations4