Security redesign: template-only tool surface + compliance judge
BREAKING: Complete CRD redesign per security-first architecture.
Removed:
- ToolBinding CRD (replaced by WorkflowTemplate + CompliancePolicy)
- JudgePolicy CRD (replaced by CompliancePolicy)
- AgentJudgeConfig, JudgeTiers types (no longer needed)
Added:
- WorkflowTemplate CRD: cluster-scoped, defines pre-approved workflow
steps, parameter schemas, output schemas, and compliance requirements.
These are the ONLY thing agents can invoke.
- CompliancePolicy CRD: cluster-scoped, defines security/regulatory rules
that the judge evaluates each workflow instantiation against.
Supports SOC2, HIPAA, GDPR, and custom frameworks with rule-level
severity and escalation paths.
Changed:
- Agent: stripped judge/toolbinding fields, added template whitelist,
allowed data sources/destinations, compliance policy refs
- AgentGroup: same pattern, removes judge ref + toolbinding refs
- AgentStatus: removed judge audit tracking, added activeTemplate and
lastWorkflow
Design:
- Agents expose exactly 1 tool: template_workflow(template, params)
- Judge evaluates each call against WorkflowTemplate spec + CompliancePolicy
- Per-action authorization becomes per-workflow authorization
- Every invocation is a structured, auditable record
Marcus (agent-cos)
7607086664