Guardian Agent
Secure AI agent authorization framework — monitoring, validating, and governing every autonomous action through identity verification, risk scoring, and permission enforcement.
AI Risk Meter
Security Pipeline — Every action takes this path
Email Arrives
Gmail API
AI Analysis
GPT-4o
Risk Score
LOW / MED / HIGH
Permission Gate
Allow / Approve / Block
Execute + Log
Audit Trail
—
Total
—
Pending
—
Executed
—
Blocked
—
Step-Up
Connected Services
Auth0
Identity + MFA
Gmail API
Email inbox
GPT-4o
AI inference
Policy Layer
RBAC engine
analytics Inbox AI Analysis
Loading inbox analysis…
pending_actions Pending Actions …
🔐 Step-Up Auth Required
A high-risk action (send email) is pending. Guardian requires you to re-verify your identity via Auth0 before the agent can proceed.
event_note Activity Log
Full log →Loading…
account_tree Guardian Agent Security Model
Layer 1
Identity
Auth0 verifies every user before any action. No anonymous AI operations.
Layer 2
Risk Classification
GPT-4o scores every action LOW / MEDIUM / HIGH with confidence + reasoning.
Layer 3
Permission Policy
Policy map enforces allow / approval / step-up / block per action type.
Layer 4
Human Approval
Medium-risk queues for human decision. High-risk triggers Auth0 step-up re-auth.
Layer 5
Activity Audit
Every action — executed, approved, rejected, or blocked — is immutably logged.
policy Permission Policy Table
| Action | Risk | Risk Meter | Policy | Explanation |
|---|---|---|---|---|
| 📧 Read / Summarize / AI Analyze | LOW | LOW
MED
HIGH
|
check_circle Auto-Execute | Read-only, no side-effects — zero friction |
| ✍️ Draft Reply | LOW | LOW
MED
HIGH
|
check_circle Auto-Execute | Draft saved — never sent without explicit approval |
| ⭐ Flag / 🗄️ Archive | MEDIUM | LOW
MED
HIGH
|
pending Approval Gate | Queued in Pending widget — you decide |
| 📤 Send Email | HIGH | LOW
MED
HIGH
|
lock_person Step-Up Auth | Auth0 forces re-authentication before execution |
| 🗑️ Delete / ⚙️ Settings | BLOCKED | LOW
MED
HIGH
|
block Always Denied | Hard-coded — no override, no confidence threshold unlocks this |