# Boundrix
 
> Boundrix is a runtime authorization and audit layer for AI agents. It helps teams enforce task-scoped execution boundaries, delegation lineage, revocation, and audit evidence for AI-agent actions.

## Product

- Product name: Boundrix
- Company: SASLabs
- Category: AI agent security, runtime authorization, non-human identity security
- Primary use case: All autonomous AI agents—from AI coding agents to production agentic pipelines and bots (e.g. Grok bot, Claude Code, Cursor, Windsurf, Devin)
- Core capabilities: task-scoped authorization, per-action policy decisions, delegation lineage, revocation, audit evidence, in-VPC deployment
- Target buyers: platform engineering, application security, DevSecOps, AI engineering, and enterprise security teams
- Website: https://boundrix.io/
- Documentation: https://boundrix.io/docs
- GitHub demo: https://github.com/sasilabs/boundrix-runtime-authorization-demo

## What Boundrix does

Boundrix evaluates whether an AI agent is authorized to perform a specific action for a specific task, resource, context, and time window. It supports task-scoped grants, delegation lineage, revocation, and audit evidence.

## Initial use case

Boundrix secures autonomous AI agents—from AI coding agents interacting with GitHub to production agentic pipelines. Teams can allow an agent to read a repository, modify files, create a branch, and open a pull request, while blocking unrelated repository access, destructive actions, IAM changes, and actions after task revocation.

## Deployment & Enforcement Boundaries

Boundrix defines three explicit enforcement boundaries:
- **SDK-only mode**: The agent calls `authorize()` before its tool call. The customer remains responsible for ensuring the agent cannot bypass the SDK.
- **Sidecar/tool-gateway mode**: The agent cannot directly reach the protected tool. All protected calls pass through the Boundrix sidecar or gateway. The sidecar evaluates and forwards only ALLOW decisions.
- **Credential-broker mode**: The agent does not receive the downstream credential. Boundrix or the customer-side gateway obtains or injects narrowly scoped credentials only after authorization.

In-VPC deployment is part of the product architecture; enterprise deployment options should be confirmed with the SASLabs team.

## Contact

- Expert & Founder: saslabs.corp@gmail.com