arXiv: ToolGuardian: Declarative Security for AI Agent-Tool Interactions

This publication introduces ToolGuardian, a declarative security framework designed to govern how AI agents interact with external tools and APIs. It proposes a structured approach to defining and enforcing safety policies for agent-tool interactions, addressing a critical gap in current AI governance. The framework allows organizations to specify rules for tool usage, data access, and action permissions in a machine-readable format, enabling automated compliance checks and runtime enforcement.

The primary impact falls on organizations deploying autonomous AI agents, particularly in regulated sectors such as finance, healthcare, and critical infrastructure. Any entity using large language models or AI systems that invoke external tools—including cloud service providers, enterprise software vendors, and financial institutions—should assess how ToolGuardian’s declarative policy model aligns with their existing AI risk management frameworks. The framework is especially relevant for compliance teams overseeing AI Act obligations related to transparency, human oversight, and risk mitigation.

Compliance teams should first review their current agent-tool interaction logs to identify ungoverned or ad-hoc permissions. Next, evaluate whether ToolGuardian’s declarative policy approach can be integrated into existing AI governance pipelines, particularly for documenting and enforcing permissible tool actions. Finally, engage with technical teams to pilot the framework in sandboxed environments, ensuring that policy definitions map to regulatory requirements under the EU AI Act and sector-specific rules. Proactive adoption of such declarative controls may reduce audit friction and demonstrate robust risk management.