Aegis Governance

Runtime enforcement of agent governance policies through path permissions, role-based boundaries, and content pattern scanning.

Validates every agent action against policy files before execution, implementing runtime governance enforcement. Supports path permissions (writable, read-only, forbidden), role-based boundaries, content pattern scanning for sensitive data, and quality gate validation. Achieves zero token overhead by loading governance files into server memory rather than including them in the agent context window. Provides three operational modes: Universal (role selection), Construction (full access), and Fixed (pre-assigned role).