Authenticated action path
An OpenShell sandbox made the request through its authenticated middleware connection to Epistema’s Interlock.
Epistema brings AI Governance as a Service into NVIDIA OpenShell’s agent action path. Its Interlock evaluates whether a consequential business request remains supported before the request reaches its destination.
The working capability
OpenShell supervises the sandbox and enforces its request policy. Epistema adds a business-evidence check at that boundary: a permitted route proceeds only while the relevant commitment remains supported.
An OpenShell sandbox made the request through its authenticated middleware connection to Epistema’s Interlock.
The scenario follows SAP’s documented approval, posting, and blocked-invoice release sequence. The request uses the published Release API’s invoice and fiscal-year parameters.
The request reached the controlled business-system service while ready. After compliance evidence changed, the identical request received HTTP 403 and did not reach the service again.
The working solution uses a controlled service aligned with SAP’s documented Release API. Connection to a non-production SAP tenant is the next integration step.
Product progression
Epistema’s earlier A2A work with Microsoft Foundry on Azure established a working path for a Foundry-hosted agent to invoke Epistema’s deployed assurance service and receive a structured, read-only assessment. The OpenShell integration extends this product work to the point where an agent attempts a business action.
An agent consults Epistema during a workflow. The assessment identifies unsupported approval evidence without authorizing or changing governed state.
Review the A2A release →Epistema evaluates current business support before a governed request proceeds. A changed evidence posture can stop the action even while the sandbox’s network policy still permits the route.
Ongoing product work
These integrations advance Epistema’s aim to lead in AI Governance as a Service: bringing evidence-aware governance across agent platforms and into enterprise workflows. The next SAP validation is a connection to a non-production tenant; Epistema’s governance service remains its proprietary product.