2026 / policy gateway
An agent’s permission is not enough; its evidence matters.
MandateFlow places a policy gateway between an agent and protected tools, checking the provenance of the information behind an action.
A support request can become a CRM case when its lineage is allowed. A payment-failure request can look similar while carrying a different data boundary.

Same-looking request. Different lineage. Different outcome.
- Constraint
- The same public call can arrive with different references, so permission alone cannot explain whether the next tool call is safe.
- My role
- Team project. This page keeps my individual contribution at the system level until the final scope is documented.
- Decision
- Use a Go MCP gateway to resolve provenance, apply policy, and write a redacted receipt before the protected tool runs.
- Evidence
- Support → CRM is allowed; payment → CRM is denied before execution, with an aggregate payment-failure path that does not re-identify a customer.
One honest limit
The public project status and final contribution boundary still need a release review before this becomes a full case study.








