Agent integration architectures

A named platform can authenticate a caller and expose a tool, but a consequential action still needs a task-specific decision at the effect boundary. These are architecture analyses, not a catalog of shipped ProofGrid connectors.

Evaluate an execution path

Find the principal, action and enforcing system.

For each system, follow the autonomous principal and its originating grant into the tool, API or infrastructure operation that can change state. Then ask which component can deny the exact operation, how delegation narrows it and what evidence can confirm the actual result.

01 / Integration architecture

Agent runtimes

Read the platform-specific action boundary and the separate business-authority check.

OpenAI Agents SDK tool authorityWhere can an action check intercept a function-tool call?Anthropic tool-use authorityHow is model tool selection separated from permission to execute?Copilot Studio agent action authorityWhen do connector credentials fail to express business approval?Amazon Bedrock Agent action-group authorityWhere can action-group operations be checked before a Lambda effect?LangGraph tool-node authorizationHow can a graph enforce an action-specific decision?CrewAI delegation controlHow can one crew member pass a narrower task to another?

02 / Integration architecture

Identity and business systems

Read the platform-specific action boundary and the separate business-authority check.

Microsoft Entra agent identity and action authorityWhich identity facts can feed a separate runtime decision?Salesforce agent record-update authorityWhich CRM writes require a fresh action decision?ServiceNow agent remediation authorityHow should an incident remediation action be bounded?GitHub agent repository-write authorityHow can repository and branch scope bound an agent write?Snowflake agent query and export authorityWhy does query permission differ from export authority?

03 / Integration architecture

Infrastructure and data

Read the platform-specific action boundary and the separate business-authority check.

Kubernetes agent-operation authorityWhich cluster mutations need task-specific approval?Terraform agent apply authorityHow can approval bind to the exact plan being applied?PostgreSQL agent-write authorityHow can table and row scope be enforced for an agent?MCP gateway and executor authorityWhich decisions belong at a gateway versus the executor?SPIFFE workload identity for agentsHow can workload identity feed, but not replace, action policy?

Architecture discussion

Choose a real action and map its authority chain.

Request a Conversation