Patterns

ModelRequest -> PolicyValidated<ModelRequest>

Intercept and inspect upstream AI model requests to apply access policies, verify limits, and audit payloads before routing.

AuthRequest -> CachedToken

Initiate an OAuth2/SSO device authorization flow, printing a verification URI and user code to the terminal, and polling the token endpoint.

Artifact<FileOrURL> -> AnalysisReference

Submit local artifacts or URLs to an isolated remote sandbox API to obtain a tracking analysis reference.

SourceCode, TaskInputs -> ExecutionLogs, TaskOutputs

Execute untrusted, LLM-generated code blocks within a resource-constrained, network-isolated container to capture raw execution logs and results.

GeneratedCode -> OrchestrationResult

Execute LLM-generated control-flow scripts inside a secure isolate sandbox to orchestrate dynamic tool calls.

NetworkTarget -> List<AIInfrastructureSignature>

Identify active AI framework interfaces (e.g. sglang, lollms, llama.cpp) by matching target response payloads against signature libraries.

RowData + PythonCode -> RowData

Execute untrusted Python agent code inside isolated sandbox containers orchestrated via Arrow Flight, producing evaluated row outputs.

VerifiablePresentation -> VerifiedClaims

Verify the cryptographic signatures of a Verifiable Presentation and its constituent Verifiable Credentials using resolved public keys.

DID -> DIDDocument

Resolve a Decentralized Identifier (DID) to its corresponding W3C DID Document containing cryptographic keys and service endpoints.

OAuthConfigRequest -> SetupSession

Generate a temporary user-interactive setup URL for external OAuth consent and expose a session identifier to track its completion.

RawAgentCommand -> ExecutionResult

Intercept agent keyboard inputs to execute only a validated, high-level CLI wrapper subset instead of open-ended bash commands.

McpProtocolMessage -> McpProtocolMessage

Expose an MCP-compliant endpoint over HTTPS that bridges local MCP clients to cloud-hosted agent tools using bearer tokens.

UserCredentials -> ImpersonatedSecurityContext

Proxy execution requests to cluster managers and storage using the end-user's identity rather than the gateway's system user.

TransactionPayload + AdminAuth -> ExecutedTransaction

Execute an arbitrary action on behalf of an account by validating the caller against a privileged system-level administrator group.

TransactionProposal + ApprovalList -> ExecutedTransaction

Accumulate cryptographic approvals from designated accounts for a proposed transaction payload and execute it once the threshold is satisfied.

IdentityAssertion -> AuthorizedTransportCredentials

Exchange identity assertions for short-lived access credentials using an identity assertion provider during transport initialization.

Transaction -> QuorumCertificate

Broadcast transactions to multiple remote validators, collect their cryptographic signatures, and assemble them into a quorum certificate once a trust threshold is met.

DomainName, ChallengeToken -> VerificationStatus

Verify domain ownership by sending an HTTP request to a predefined well-known path on the target domain and asserting the returned token matches.

DomainName, ChallengeToken -> VerificationStatus

Verify domain ownership by querying the DNS TXT records of a target domain for a specific challenge token.

AuthenticationAttempt<DecoyToken> -> SecurityAlert

Generate and distribute inactive, monitored decoy credentials that trigger security alerts when an authentication attempt is made with them.

UnauthenticatedRequest -> AuthenticatedRequest

Intercept outbound API requests from untrusted runtimes and inject authenticating credentials at a proxy layer before forwarding.

Ciphertext -> Plaintext

Coordinate decryption requests on-chain and aggregate threshold decryption shares from an off-chain multi-party computation (MPC) Key Management Service (KMS) to reveal state securely.