How aniketchand/trust works
AgentTrust mediates AI-agent tool requests through a deterministic security gateway, then permits controlled execution against protected resources and records decisions for audit and incident review. Operators use a React dashboard to manage agents, tools, policies, delegations, provenance, monitoring, and compliance. The README documents these capabilities; sampled source confirms gateway-to-policy, audit, and tool dispatch, plus the dashboard’s API client. Some route internals and console implementations were not sampled, so those links rely on README statements or are omitted.
Main entry points: gateway_service.py Execution Gateway · v1 API Routes · policy_engine.py Policy Engine · api.client.ts API Client
Components 23
Entry and Dashboard
- FastAPI Application
backend/app/main.py - API Routes
backend/app/api/v1 - Security Dashboard
frontend/src/components/tabs - Agent Console
frontend/src/components/tabs/AgentsTab.tsx - API Client
frontend/src/services/api.client.ts - Autonomous Agent Runner
backend/app/api/v1/agent_exec.py
Identity and Enforcement
- Agent Identity
backend/app/services/agent_service.py - Credential Security
backend/app/core/security.py - Execution Gateway
backend/app/services/gateway_service.py - Policy Engine
backend/app/services/policy_engine.py - Data Leakage Prevention
backend/app/services/dlp_service.py - Injection Defense
backend/app/services/prompt_injection_service.py
Tool Execution
- Tool Registry
backend/app/services/tool_registry.py - Protected Tool Adapters
backend/app/tools
Governance and Evidence
- Delegation Controls
backend/app/services/delegation_service.py - Data Provenance
backend/app/api/v1/provenance.py - Audit and Incidents
backend/app/services/audit_service.py - Monitoring and Overview
backend/app/api/v1/overview.py
Platform State
- Relational Database
backend/app/core/database.py
Other components
- AI Agents
- Security Operators
- Open Policy Agent
- Protected Resources
Connections 27
- AI Agents → Execution Gateway: request execution
README.md - Execution Gateway → Policy Engine: evaluate access
backend/app/services/gateway_service.py - Execution Gateway → Data Leakage Prevention: check leakage
backend/app/services/gateway_service.py - Execution Gateway → Injection Defense: inspect prompts
backend/app/services/gateway_service.py - Execution Gateway → Delegation Controls: verify delegation
- Execution Gateway → Tool Registry: resolve tool
backend/app/services/gateway_service.py - Execution Gateway → Audit and Incidents: record outcome
backend/app/services/gateway_service.py - Execution Gateway → Protected Tool Adapters: execute allowed action
backend/app/services/gateway_service.py - Protected Tool Adapters → Protected Resources: access protected resource
README.md - Tool Registry → Protected Tool Adapters: register implementations
backend/app/services/tool_registry.py - Policy Engine → Open Policy Agent: query optionally
backend/app/services/policy_engine.py - Policy Engine → Relational Database: read permissions
backend/app/services/policy_engine.py - Agent Identity → Credential Security: hash credentials
backend/app/services/agent_service.py - Security Operators → Security Dashboard: manage security
README.md - Security Dashboard → API Client: request platform data
frontend/src/components/tabs/AgentsTab.tsx - Agent Console → API Client: provision and revoke
frontend/src/components/tabs/AgentsTab.tsx - API Client → API Routes: call REST endpoints
README.md - API Routes → Execution Gateway: dispatch execution
backend/app/api/v1/agent_exec.py - API Routes → Agent Identity: manage agents
- API Routes → Delegation Controls: manage grants
- API Routes → Data Provenance: serve lineage
backend/app/api/v1/router.py - API Routes → Audit and Incidents: serve audit records
- API Routes → Policy Engine: manage policies
- Autonomous Agent Runner → Execution Gateway: intercept workflow actions
backend/app/api/v1/agent_exec.py - FastAPI Application → API Routes: mount routes
backend/app/main.py - FastAPI Application → Relational Database: initialize tables
backend/app/main.py - Monitoring and Overview → Relational Database: aggregate telemetry