Reeflex Gate icon

Reeflex Gate

Deterministic governance gate for AI-agent actions - calls reeflex-core POST /v1/decide

Reeflex Gate

AI-generated

Summary

Submits one Action Envelope per input item to reeflex-core’s /v1/decide endpoint, then routes each item to Allowed, Held for Approval, or Denied. Set the action details and risk axes to describe the action truthfully; the defaults are deliberately conservative.

Inputs

  • Action / Ability (required) — Backend-specific action identifier, such as wordpress/delete-post; the segment before / becomes the action namespace, or n8n if there is no /.
  • Verb — Action type: create, delete, emit, execute, read, transact, or update. Defaults to read.
  • Environment — Target environment: production, staging, or dev. Defaults to production.
  • Reversibility — Whether the action is reversible, recoverable, or irreversible. Defaults to irreversible.
  • Blast Radius — Affected scope: single, broad, or systemic. Defaults to systemic.
  • Externality — Whether the action is internal or outbound. Defaults to outbound.
  • Count — Number of affected entities; defaults to 1 and is sent as the envelope magnitude count.
  • Target System — Optional free-text system or service identifier, sent as the target kind.
  • Session ID (required) — Stable session identifier used by reeflex-core for cross-call fragmentation checks; defaults to the current workflow execution ID.
  • Agent ID (required) — Identifier of the agent performing the action; defaults to agent:n8n.
  • Additional Fields: On Behalf Of — Optional authorized human principal the agent is acting for.
  • Additional Fields: Target Ref — Optional stable identifier for the specific target entity; leave empty for bulk actions.

Output shape

Three output branches: Allowed, Held for Approval, and Denied. Each routed item retains its input JSON and, for decisions from reeflex-core, adds reeflex containing the decision data and submitted envelope.

A allow decision goes to Allowed, require_approval goes to Held for Approval, and all other decisions go to Denied. Unreachable service responses or responses without a decision fail closed to Denied. Parameter errors throw unless Continue On Fail is enabled; then the item goes to Denied with an error field.

Links

Discussion