Skip to navigation

Tutorials

View as Markdown

Each tutorial sets up one governance scenario end to end: the setup, the policy, the behavior you should see, and the audit evidence that proves it. The scenarios are introduced in Use Cases.

Start with Your First Signed Policy and Your First Governed Agent. The tutorials assume APF is running and registered with OpenShell as described there.

Govern a Coding Agent

Give a coding agent read-only source control, approved inference endpoints, and nothing else.

Protect Sensitive Data

Deny tool calls that carry credentials, redact them from plain requests, and withhold personal data.

Update a Signed Policy

Change a rule, publish a new revision, and watch the gateway swap its evaluator without a restart.

Reject a Tampered Bundle

Tamper with a signed bundle in three ways and see each one refused with a precise reason.