KYE Governed Prompts

Agentic Governance with Authority Finality at the prompt boundary.

A prompt that invokes a tool, generates code that will be committed, or produces a plan that drives the next act is an authority act — it spends authority a principal delegated, within a purpose and a scope. KYE Governed Prompts govern it as one: emitted before transmission, decided allow / tool-restrict / escalate / refuse, and sealed into a signed, replay-derivable evidence chain. Prompt-as-authority-act, not prompt-as-input.

Two envelopes — before transmission, and after the decision.

Before a prompt reaches the model, the emitting agent emits a governance envelope binding the agent, the purpose it serves, the scope it acts within, the target model, the prompt class, a prompt hash (the body never leaves the boundary), and the attached PII categories. The governance decision then emits an outcome envelope — allowed, refused, escalated, or tool-restricted — sealing the act into the attestation chain.

Integrations — wherever the prompt is transmitted.

  • LangChain wrapper — wraps LLM / ChatModel calls.
  • OpenAI SDK middleware — intercepts chat.completions.
  • Anthropic SDK middleware — intercepts messages.create.
  • Claude Agent SDK hook — a pre-prompt / PreToolUse hook.
  • MCP intercept — every tool-call prompt crossing the gateway.

Versus prompt firewalls — complementary, but a different altitude.

Prompt firewalls (Lakera, Robust Intelligence, Cisco AI Defense, NVIDIA NeMo Guardrails) govern the prompt as input — scanning for injection, jailbreaks, and toxicity. KYE Governed Prompts govern the prompt as an authority act — bound to a purpose, a scope, and a replay-derivable evidence chain. A firewall verdict can feed the governance decision; it does not replace it.

Govern every prompt your agents send.

KYE Governed Prompts is a governance projection of KYE Protocol™, surfaced through KYE GovernedUI™. Every operator decision emits a signed Evidence Pack™.