The Universal Enterprise Release

[Harshit-J004]

Version 6.0.0 built the Absolute Zero firewall for Python agents. Today, Version 6.1.0 breaks ToolGuard out of the Python ecosystem entirely. We have transformed ToolGuard into a distributed, language-agnostic Enterprise Firewall capable of protecting massive agent swarms written in any language, running on any cloud.

This release introduces three massive architectural evolutions: The HTTP Proxy Sidecar, Redis Distributed State, and Asynchronous Webhook Approvals.

--- NEW: Enterprise HTTP Proxy Sidecar (Cross-Language Support) ---
ToolGuard is no longer just a Python library. It is a universal network sidecar.

• Asymmetric Language Architecture: ToolGuard can now be used natively by developers building agents in TypeScript, Node.js, Go, Rust, Java, or any language that can make an HTTP request.
• REST Intercept Endpoint: Simply POST your tool payloads to /v1/intercept. The proxy executes the full 7-Layer security pipeline and returns a deterministic allow/deny response, bridging perfectly into the Obsidian Dashboard.
• Docker & Kubernetes Integration: Abstract Python away completely. Deploy the official Docker image (ghcr.io/Harshit-J004/toolguard-proxy:latest) directly to your production cluster.
• API Key Security: Secure your proxy sidecar against unauthenticated internal network requests using strict Bearer Token middleware via the TOOLGUARD_API_KEY environmental variable.
• K8s Readiness Probes: Includes native GET /v1/health probes for Kubernetes orchestration.

--- NEW: Distributed State (The Cluster-Safe Upgrade) ---
As ToolGuard moved to the enterprise, local file storage became a bottleneck for swarm orchestration.

• Redis Enterprise Backend: Implemented a robust RedisStorageBackend enabling atomic INCR, SETEX, and HSET operations.
• Cluster-Safe Rate Limiting: Prevents Rate-Limit (L4) leakage across 50-pod Kubernetes load-balancers. If an agent loops maliciously, the entire cluster denies the transaction instantly.
• Unified Interface: Decoupled all memory systems (Rate Limits, Approval Caches, Schema Fingerprints, Execution Grants) with zero-config local SQLite/JSON fallbacks for local development.

--- NEW: Asynchronous Webhook Approvals (Headless Resumption) ---
The final piece for enterprise automation: Headless Human-in-the-Loop.

• Headless-First Approvals: When a Risk Tier 2 or 3 tool fires in an unattended cloud server (where sys.stdin.isatty() == False), ToolGuard no longer permanently fails closed. Instead, it pauses the execution thread safely.
• 4 Native Webhook Integrations: Instantly fires interactive approval requests to Slack (Block Kit), Discord (Embeds), Microsoft Teams (Adaptive Cards), or Generic webhooks (Zapier/Make.com).
• Cryptographic Execution Grants: Generates an ephemeral grant_id UUID stored in Redis with a PENDING state.
• FastAPI Approval Server: Pre-built HTTP endpoints (/toolguard/approve & /toolguard/deny) rendered with beautiful dark-mode HTML confirmation pages.
• Polling Resumption Loop: The interceptor securely polls the Redis cluster for a manager's remote authorization up to the timeout limit before securely unblocking the LLM chain.

The firewall is no longer a local library. It is a distributed global defense network.

Credits: Architected and Engineered by Harshit-J004.
Repository: https://github.com/Harshit-J004/toolguard
Documentation: https://github.com/Harshit-J004/toolguard#readme
Deployment: docker run -d -p 8080:8080 -e TOOLGUARD_API_KEY="my_secret_key" ghcr.io/harshit-j004/toolguard-proxy:latest

---

This discussion was created from the release The Universal Enterprise Release.