Tembory Action Guard icon

Tembory Action Guard

Deterministically validates and records protected tool actions before and after execution

Actions4

Reservar Antes de Executar

AI-generated

Summary

Validates an action and atomically reserves it with Tembory before a workflow executes the side effect. It uses an idempotency key to prevent duplicate execution on retries, and stops the workflow if the action is disallowed or execution is not permitted.

Inputs

  • Ação (required) — Action to validate and reserve.
  • ID da Conversa (required) — Stable conversation identifier, reused when confirming the reservation. Defaults to temboryGuard.scope.threadId, threadId, or sessionId from the input item.
  • ID do Usuário (required) — Stable user identifier, reused when confirming the reservation. Defaults to temboryGuard.scope.userId, userId, customerId, threadId, or sessionId from the input item.
  • Chave de Idempotência (required) — Stable business-event key used to prevent duplicate execution during retries. Defaults to idempotencyKey, requestId, messageId, or eventId from the input item; the execution ID is not suitable because it changes on retries.
  • Entrada da Ação — JSON input sent for validation and reservation. Defaults to actionInput or the full input item.

Output shape

One output item per input item, preserving its existing JSON and adding a temboryGuard object containing the Tembory response and the threadId/userId scope.

Calls Tembory's action-reserve endpoint. Throws an item-scoped error if the response does not have allowed: true or executionPermitted: true; downstream workflow steps run only when reservation succeeds.

Links

Discussion