Fortified Fleet | Zero-Trust Agent Governance & Blast-Radius Firewall

Executes a multi-agent pipeline with strict scope attenuation: db_query_agent → report_agent → notifier_agent.

Task Goal / Context:

Presets:

Gemini analyzes open-ended goals, dynamically decomposes them into subtasks, requests least-privilege scopes, and navigates the blast-radius firewall.

Open-Ended Objective:

Ideas:

Simulate real-world adversary and prompt-injection vectors to verify zero-trust firewall mitigations.

1. Privilege Escalation

Requests cloudsql:orders:write on a read-only agent.

2. Scope Widening Across Hop

Intermediary attempts to grant broader scope than it holds.

3. Audit Record Tampering

Corrupts a stored audit record without valid HMAC-SHA256 signature.

4. Prompt Injection (Gemma Triage + Agent Sanitization)

Tests the Gemma pre-firewall content classifier, backstopped by worker-level defense-in-depth against DROP TABLE.

Test hypothetical delegations through the Blast-Radius Firewall without making actual network calls.

🧪 Scope Policy Evaluation Sandbox

Caller Agent (Delegator):

Target Agent (Recipient):

Requested Scope(s) (comma separated):

➕ Register a New Agent to Fleet

Declare the agent's identity, system prompt, and hard permission ceiling. The firewall will continuously enforce this ceiling at runtime.

Quick Templates:

Agent Identifier (Unique Name):

Agent Role / Description:

Declared Scope Ceilings (comma separated): Format: resource:action (Actions: read, write, send, admin, audit)

Calculated Maximum Blast-Radius: 0 (NONE)

Invokes the security_auditor_agent to audit HMAC signatures, calculate aggregate fleet exposure, and certify governance compliance.

EXECUTION TELEMETRY & RESULTS IDLE

// Awaiting task execution, attack simulation, or agent registration...

FLEET TOPOLOGY & ZERO-TRUST SCOPES

Select an Agent Node ONLINE

IAM Role / Service Account: roles/datastore.user

Declared Scope Ceiling: [firestore:reports:read, firestore:reports:write]

Max Blast Radius Index: 5

FORTIFIED AGENT FLEET

➕ Register a New Agent to Fleet

FLEET TOPOLOGY & ZERO-TRUST SCOPES

CRYPTOGRAPHIC PROVENANCE AUDIT TRAIL