Clampd Scope Enforcement Demo

acme-support-bot

b0000001-0001-0000-0000-000000000001

Granted Scopes:

db:read api:call

#1 database.query SELECT name FROM users

db:read --

#2 database.query DROP TABLE users

db:write --

#3 api.call POST /api/payments

api:call --

#4 shell.exec rm -rf /

shell:exec --

#5 file.read cat /etc/passwd

file:read --

#6 database.query SELECT * FROM users

db:read --

Total

Allowed

Denied

Flagged

0ms

Avg Latency

1. Tool call → 2. ag-intent classify (gRPC) → 3. Risk score + matched rules → 4. ag-policy evaluate (gRPC) → 5. Allow / Deny

Steps 1-4 use real gRPC calls to ag-intent (classification) and ag-policy (scope enforcement via OPA Rego). All results are live.