AI gateway policy workshop

Scenario

Design a gateway for an internal assistant that can use a local model, an approved external endpoint for low-sensitivity tasks, private retrieval, and one approval-based tool.

Tasks

1. Map actor, workload, gateway, model, retrieval, tool, identity, policy, and evidence boundaries.
2. Define the identity envelope and delegated authority at every hop.
3. Build a decision table for prompts, files, destinations, tools, responses, and administrative actions.
4. Create inspection cases including encoding, streaming, mixed permissions, adversarial text, and false-positive handling.
5. Define local-first routing, allowed egress, capacity failure, endpoint verification, and deny behavior.
6. Identify and close bypass paths.
7. Specify evidence minimization, release tests, rollback, and incident response.

Deliverables

Submit the boundary diagram, identity and delegation flow, policy table, inspection test set, egress/route design, bypass review, evidence schema, release decision, and exception procedure.

Passing work does not depend on a language model to authorize access and never converts service unavailability into uncontrolled egress.