AI agent policy as code: Policy as Code for Shell and Apply

# policy/gate.py
import subprocess, json

def authorize(action: str, input_doc: dict) -> bool:
    p = subprocess.run(
        ["opa", "eval", "-f", "values", "-d", "policy/", "data.agent.allow",
         "-i", "/dev/stdin"],
        input=json.dumps({"action": action, **input_doc}).encode(),
        capture_output=True,
    )
    out = json.loads(p.stdout or "[]")
    return bool(out and out[0] is True)

# policy/shell.rego
package agent

default allow = false

allow {
  input.action == "run_shell"
  input.role == "implementer"
  startswith(input.cwd, "/workspace")
  not contains(input.cmd, "curl")
}

export async function runShell(role: string, cmd: string, cwd: string) {
  if (!authorize("run_shell", { role, cmd, cwd })) throw new Error("policy_deny");
  // proceed
}