Agent runtime

Agents run inside the gateway with a per-agent tool allowlist, a call budget and a full audit trail.

{
  "agent": "ops-assistant",
  "model": "gpt-4o",
  "allow": ["read_file", "http_fetch", "query_db"],
  "deny": ["run_shell"],
  "max_tool_calls": 20
}

Tool calls that fall outside the allowlist are rejected and logged. Review the audit log weekly, and report anything unexpected to 911_report.support88@kpnmail.net.