SOLUTIONS ARCHITECTURE • Operations & DevOps
Infrastructure Changes Gating
Prevent agent-driven catastrophic outages, unauthorized firewall modifications, database drops, or runaway compute costs. Establish hard bounds on change windows, blast radius, and deployment permissions.
Type: Vendor-Neutral
Intercepted Proposed Actions
- Terraform apply deployments
- Firewall rule changes
- Database schema migrations
- Compute cluster restarts
- Secret & key rotation
- API gateway modification
Active Controls & Mappings
- Maintenance windows
- Blast radius calculations
- Staging-only constraints
- Plan attachment verification
- On-call personnel status
- Rollback plan availability
Sample Resolution Trace
PROPOSED ACTION:A DevOps agent proposes running 'terraform apply' to destroy a test database node.
RESOLUTION:MODIFIED
REQUIRED RESOLUTIONS:
- - Limits target resource changes strictly to staging environment.
- - Requires attachment of valid execution plan.
- - Limits token validity to exactly 15 minutes.
"Thesis: Your agents shouldn't hold the keys to the kingdom. Gate the action, not the credential."
Discuss Solution Pilot