OpenAI agent procurement governance
Govern OpenAI SDK tool calls with Limetry action policy before a purchase, provision, or HTTP side effect runs.
Flow
- Policy — an
ActionPolicysets allowed types, resource allow/deny lists, spend caps, and audit mode. - Intent — before the tool runs, the app drafts an
ActionIntent(type, resource, optional cost). - Evaluate — Limetry returns
allow,deny, orapproval_required. - Minimize —
createSlimActionPolicy({ auditMode: "minimal" })andredactActionIntentkeep credentials out of local logs; the server also scrubs before audit storage.
Code structure
src/action-governance.ts: ExportsbuildProcurementActionPolicy(),buildPurchaseIntent(), and privacy redaction helpers.tests/action-governance.spec.ts: Automated tests verifying policy creation, intent generation, and local log scrubbing.
Tests
yarn workspace @examples/openai-agent-procurement-governance test
