Tool call → Policy Engine → allow / block / escalate

import httpx

headers = {"Authorization": "Bearer ag_prod_..."}

policy = {
    "agent_id": "billing-agent",
    "name": "Block large transactions",
    "conditions": {
        "tool_name": "charge_card",
        "amount_gt": 10000
    },
    "action": "escalate",
    "priority": 10
}

httpx.post("https://api.polaxis.io/api/v1/policies", json=policy, headers=headers)

{
  "name": "Block DELETE on production",
  "conditions": {
    "tool_name": {"in": ["delete_records", "drop_table", "truncate"]},
    "environment": "production"
  },
  "action": "block"
}

{
  "name": "Escalate large charges",
  "conditions": {
    "tool_name": "charge_card",
    "tool_input.amount": {"gt": 500}
  },
  "action": "escalate"
}

{
  "name": "Block external email",
  "conditions": {
    "tool_name": "send_email",
    "tool_input.to": {"not_contains": "@yourcompany.com"}
  },
  "action": "block"
}

{
  "name": "Healthcare — PHI access control",
  "conditions": {
    "tool_name": {"in": ["read_patient", "update_record"]},
    "tool_input.patient_id": {"not_in": "$session.authorized_patients"}
  },
  "action": "block"
}

POST /api/v1/policies/simulate
{
  "policy_id": "pol_xxx",
  "tool_name": "charge_card",
  "tool_input": {"amount": 9999}
}
# → { "would_trigger": true, "action": "escalate" }

POST /api/v1/policy-templates/{template_id}/apply
{ "agent_id": "your-agent-id" }