Integration architecture
Put TrigGuard between intent and execution
Integrate through the SDK, execution gateway, or an execution-specific adapter. TrigGuard evaluates the requested action before it reaches the system that can execute it.
System architecture → /architecture. How to implement → Quickstart.
- Agent / Application / Automation
- Integration point · SDK / API / Adapter
- TrigGuard · Authorization gate
- PERMIT / DENY / ESCALATE / SILENCE
- Tool / Cloud / DB / Robot
- Receipt
Choose your integration point
Three ways to sit on the execution path
-
Inline SDK
Application and agent runtimes
Lowest integration distance
-
Gateway
APIs, CI/CD, cloud, shared infrastructure
Central authorization boundary
-
Adapter
Robotics, OT, execution-specific systems
Bind authorization to the execution interface
Same boundary, different surfaces
Authorization model stays constant
The gate is always before the irreversible action. Only the surface changes.
| Surface | Before | Authorized execution |
|---|---|---|
| AI agents | tool call | tool / API |
| CI/CD | release | deployment |
| Cloud / IaC | apply | infrastructure |
| Database | mutation | database |
| Robotics | command | controller / actuator |
| Enterprise | workflow action | target system |
One example
Authorize, then execute
Agent
↓ proposes
deploy.release
↓
authorize({
surface: "deploy.release",
actor: "release-agent",
target: "production"
})
↓
TrigGuard
↓
PERMIT + receipt
↓
Deployment executes
See implementation → Quickstart Request schema → API reference Decision semantics → Protocol
Ready to integrate?
Start with the Quickstart, or talk to us about a production architecture.