From Atlas experiment to Airlock: extracting agent governance into a product
Blog post from WorkOS
Airlock is a standalone authorization system designed to govern AI agents’ actions across company tools by applying centrally managed policies beyond standard provider permissions. Demonstrated with a custom agent connected to Gmail and Linear, it allowed routine actions while blocking an email containing token-spend information classified as financial data and requiring IT approval for an unfamiliar distribution list. Agents retain responsibility for planning tasks and proposing tool calls, while Airlock evaluates those calls against organizational rules, task context, deterministic API-level restrictions, and runtime content checks before they reach connected services. Originally developed within the Atlas Slack-based AI coworker, Airlock was separated so its governance engine could support multiple agent interfaces and workflows, with activity records and Slack-based approval requests providing visibility and human oversight. The product is currently available through early access for teams seeking to test it with existing workflows and integrations.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.