01 / DATA MOVEMENT
Private data→External service
Keep sensitive data
where it belongs.
Remember a sensitive read, even when another agent sends the request.
BOUNDARY / INFORMATION
Stateful runtime securityONE TASK / MANY AGENTS / ONE STATE
One task.
Many agents.
One state.
Enforce policy using what happened
across the entire AI workflow.
AGENT A→SHARED TASK STATE→AGENT B
01 / HISTORYPrior steps
02 / HANDOFFSubagent actions
ARANGATERUNTIME ENFORCEMENT
Workflow state
drives control.Enforce the next action.
drives control.Enforce the next action.
Task state+Policy→Decision
03 / NEXT STEPAgent actionAcross the workflow
State follows the task, even when agents change.CONCEPTUAL ARCHITECTURE
01 / Stateful across agents
Agents change.
State stays.
One agent starts the work.
Another acts on what it found.
EXPLORE ONE WORKFLOWIllustrative example
AGENT A / EARLIER STEP
Customer record read
Sensitive customer data entered the task.
AGENT B / SAME NEXT ACTION
Send an external request
A new agent continues the task.
STATEFUL DECISION
Block the action
Earlier sensitive read. External destination.
EXAMPLE POLICY
The same action is allowed or blocked based on earlier steps—even when another agent took them.
Sensitive path selected. Block the action.
Why stateful matters
Remember the work.
Not just the worker.
A SINGLE-STEP CHECK
“Can this agent use this tool?”
A STATEFUL DECISION
State persists across steps and agent handoffs.“Should it act now,
given the whole task?”
02 / How it works
State carried.
Policy enforced.
Track the workflow across agents.
Decide at each action.
YOUR APPLICATION
AI workflow
Agent A → Agent BTool action→
Arangate
Task state + policyRuntime decisionPermitted action→
YOUR ENVIRONMENT
Tools & data
APIs · services · systems03 / Across the workflow
Three boundaries.
Real consequences.
Illustrative cases spanning
steps and agents.
Keep sensitive data
02 / TASK DRIFT
Read a report→Delete records
Keep the agent
inside the task.
Keep the task goal intact as work passes between agents.
BOUNDARY / INTENT
03 / PRIVILEGED TOOLS
Support task→Admin action
Put powerful tools
behind clear limits.
Apply limits using the task’s earlier actions and current state.
BOUNDARY / AUTHORITY
04 / Built around your team
Build. Deploy.
Stay in control.
Let agents share the work.
Keep guardrails with the task.
Carry state across handoffs.
Enforce at each action point.
Set policy for the full task.
Make prior steps count.
Let’s talk agent security
Putting agents
into production?
Show us your agent workflow.
Let’s map state across the task.