AI Agents Don't Read Your Policy Docs. They Hit Your APIs — Gravitee

תקציר מקורי באנגליתYou can write all the rules you want in a markdown file. Your agent can still call the API. Sam, CTO at Gravity, skips the slides and runs five live scenarios against a hotel-booking agent to show why governance belongs in the infrastructure, not in the agent's instructions. Running on the Gravity Gateway with a Databricks backend, Sonnet and Groq, he shows the gateway blocking a destructive "delete all bookings" tool call, stopping an attempt to pull every guest's personal data, rate-limiting a buggy agent that fires the same request eight times, serving repeated questions from a semantic cache, and rejecting an oversized prompt before it ever reaches the LLM. He also covers telemetry across your agents, decoupling from any one hyperscaler, trimming bloated MCP tool lists, and shadow AI o