Secure Every AI Agent Side Effect
Before It Reaches Production.
Don't let prompt injection or agent hallucinations execute unauthorized refunds, mutate production databases, or drop cloud infrastructure. Issa is the independent Action Gateway that authorizes dynamically, freezes approvals with key-sorted canonical SHA-256 hashes, and guarantees atomic idempotent execution.
Why Text Prompt Guardrails Fail in Production
Text filters evaluate LLM input/output. They do NOT govern side-effect execution boundaries when agents invoke databases, APIs, or payment gateways.
Traditional Prompt Guardrail
Text-Only Filter (No Side-Effect Control)Issa Action Gateway
Action-Control & Governance Plane{"agent":"support-bot","action":"refund_order","amount_cents":60000}The 4 Non-Negotiable Guarantees of Issa
Authorize Precisely
Dynamic Rule Evaluation & Fail-Closed Default
Evaluates Principal -> Action -> Resource policy rules with strict fail-closed security. Aborts unauthorized tool calls or role escalation attempts instantly.
Approve Safely
Key-Sorted Canonical SHA-256 Hashes
Binds human approvals to key-sorted canonical SHA-256 argument hashes (arguments_hash). Zero post-approval argument drift or prompt tampering.
Execute Idempotently
Atomic Reservations & SQLite WAL Durability
Guarantees atomic execution reservations (reserve_execution) with idempotency keys. Eliminates duplicate refunds, double charges, or race conditions.
Prove What Happened
PII-Redacted Sequential Evidence Ledger
Emits sequential, immutable EvidenceEvent audit trails with sensitive prompt PII redacted. Built for instant SOC2, HIPAA, and GDPR audit readiness.
Why Enterprises Choose Issa Action Gateway
| Feature / Guarantee | Agent Frameworks (LangGraph, AutoGen) | LLM Gateways (LiteLLM, Portkey) | Workflow Engines (Temporal, Restate) | Issa Action Gateway 🦀 (Action-Control Plane) |
|---|---|---|---|---|
| Primary Focus | Prompt orchestration | Prompt filtering & cost | Code state retries | Side-effect & tool governance |
| Dynamic Policy Engine | ❌ Manual code | ⚠️ Regex only | ❌ Manual code | ✅ Declarative JSON/YAML |
| Frozen Argument Hash Approval | ❌ None | ❌ None | ❌ None | ✅ Canonical SHA-256 Hash |
| Atomic Idempotent Tool Execution | ❌ Duplicate risk | ❌ None | ⚠️ Generic retries | ✅ Atomic Reservations + SQLite WAL |
| Privacy-Aware Audit Evidence Ledger | ❌ None | ⚠️ Raw prompt logs | ❌ Workflow state only | ✅ Redacted Evidence Ledger |
| Native MCP JSON-RPC 2.0 Proxy | ❌ None | ❌ None | ❌ None | ✅ Built-in (/v1/mcp) |
| Embedded Human Approval Web UI | ❌ Custom UI needed | ❌ None | ⚠️ Basic admin UI | ✅ Built-in (GET /ui) Dark Mode |
Integrate Issa in 5 Minutes
from issa_gateway import IssaClient, IssaApiError
# Automatically resolves ISSA_GATEWAY_URL or defaults to http://localhost:3000
client = IssaClient()
try:
# Propose action intent
intent = client.request_action(
agent="support-bot",
action="refund_order",
resource_type="order",
resource_id="order_123",
arguments={"order_id": "order_123", "amount_cents": 6000}
)
# Returns: {"outcome": {"type": "approval_required", "required_role": "finance_manager"}}
if intent["outcome"]["type"] == "approval_required":
approval = client.approve_action(intent["intent_id"], approved_by="manager@datadaur.com")
result = client.execute_action(intent["intent_id"])
except IssaApiError as e:
print(f"❌ Gateway Error ({e.status_code}): {e.error_data}")Deploy Secure Production AI Agents with DataDaur
DataDaur AI & ERP Consulting provides custom enterprise implementation, architecture design, and SOC2 governance integration for Issa Action Gateway.
Security Audit
Review AI agent tool call boundaries & role escalation risks.
Custom Integration
Connect Issa seamlessly to your ERP, CRM, and cloud infrastructure.
Dedicated SLA
On-premise deployment and 24/7 technical architecture support.
Let's Start a Conversation
Tell us about your project and we'll connect you with the right team.
Common Questions.
Issa is an open-source Rust Action-Control and Governance Plane for AI Agents (MCP, LangGraph, AutoGen, CrewAI). It authorizes dynamic tool execution rules, freezes human approvals with key-sorted canonical SHA-256 argument hashes, and guarantees atomic idempotent execution with SQLite WAL durability.
LLM guardrails filter prompt text input/output before LLM generation. Issa operates downstream at the side-effect tool execution boundary—governing database mutations, API calls, and payments with fail-closed access policies and cryptographic approval verification.
When a human approves a high-risk tool call (e.g. $600 refund), Issa computes a key-sorted canonical SHA-256 hash of the exact argument payload. If a rogue agent attempts to alter arguments post-approval (e.g. changing amount to $60,000), the hash check fails and execution is aborted instantly.
Yes. Issa features a native built-in MCP JSON-RPC 2.0 proxy endpoint (/v1/mcp) that seamlessly governs tool calls from Cursor, Claude Desktop, and custom MCP clients.