S
SENTRIUM
Sign In Deploy Gateway
ENGINEERING SPECIFICATION

The Sentrium Runtime Control Plane

Sentrium inserts a deterministic, low-latency evaluation layer directly into the execution path of autonomous agents. By separating the agent's generative reasoning from its execution privileges, Sentrium enforces strict boundaries on APIs, databases, shell commands, and egress networks.

Deploy Cluster Sidecar Request Architecture Review
DEPLOYMENT TOPOLOGIES

Zero-Invasive Integration Across Any Infrastructure

Choose the deployment mode that matches your latency, compliance, and infrastructure topology requirements.

TOPOLOGY 01 • KERNEL LEVEL

eBPF Kernel Socket Filter

Attaches directly to the Linux kernel socket layer via extended Berkeley Packet Filters (eBPF). Intercepts all outbound TCP connections from designated agent container cgroups without requiring application-level proxy configuration.

  • Latency Impact: 0.8ms – 1.4ms
  • Deployment: Kubernetes Daemonset
  • Zero Modification: No env vars or code changes
TOPOLOGY 02 • POD SIDECAR

Envoy / WASM Pod Sidecar

Runs as a high-performance local proxy inside the same Kubernetes pod or container network namespace. Ingests egress tool calls via localhost, evaluates Rego policies in local memory, and forwards authorized requests over mTLS.

  • Latency Impact: 2.1ms – 3.8ms
  • Deployment: Sidecar injection via Helm
  • Isolation: Pod-isolated cryptographic keys
TOPOLOGY 03 • CLOUD GATEWAY

Multi-Region Secure Reverse Proxy

Route agent outbound traffic through Sentrium’s dedicated regional edge gateways. Ideal for serverless agent execution environments (AWS Lambda, Modal, Google Cloud Run) with instant DNS or HTTP_PROXY configuration.

  • Latency Impact: 24ms – 41.8ms p99
  • Deployment: Immediate HTTP_PROXY config
  • Availability: 99.995% multi-region SLA
ENGINEERING DEEP DIVE

The Five Subsystems of Sentrium

Comprehensive breakdown of how Sentrium parses, evaluates, constrains, and audits agent operations in production.

SUBSYSTEM 01

Parameter-Aware Tool Call Firewall

BLOCKS UNAUTHORIZED SCHEMAS

Standard network firewalls examine IP addresses, ports, and domains. The Sentrium Tool Call Firewall parses the application-layer JSON tool call structure and evaluates parameters against strict JSON Schema definitions, Abstract Syntax Trees (ASTs), and cryptographic allowlists.

SQL AST PARSER
Parses database queries prior to execution. Automatically blocks destructive statements (DROP, ALTER, TRUNCATE) or queries lacking strict tenant WHERE clauses.
SHELL EXECUTION GUARD
Evaluates bash/CLI commands generated by coding agents. Blocks reverse shells, piped external scripts, cron alterations, and unauthorized socket bindings.
METHOD WHITELISTING
Restricts agent function calling to explicitly authorized endpoints. Unrecognized function names or altered arguments are terminated with instant alert generation.
SUBSYSTEM 02

Financial & Rate Limit Circuit Breakers

HALTS RUNAWAY SPEND CASCADES

When autonomous multi-agent systems interact, failure states can cause recursive execution loops. Without deterministic circuit breakers, an agent can exhaust millions in API spend or flood downstream partners with hundreds of requests per second.

SLIDING-WINDOW VELOCITY
Maintains in-memory Redis-backed token buckets measuring tool call frequency per agent, per service, and per cluster with instant burst dampening.
FINANCIAL CEILING GATES
Extracts financial parameters from payment APIs (e.g. Stripe, Modern Treasury). Caps single transactions at preset limits and enforces rolling daily budgets.
RECURSION DETECTOR
Tracks tool argument similarity across consecutive turns. Detects stuck agents repeating identical failed calls and drops execution before rate exhaustion.
SUBSYSTEM 03

Data Boundary & Semantic Egress Redaction

ZERO SENSITIVE DATA EXFILTRATION

Autonomous agents frequently access internal knowledge bases, databases, and customer records. When invoking third-party web search or external enrichment tools, Sentrium ensures confidential corporate data and PII never escape the boundary.

AUTOMATED PII MASKING
Transforms Social Security Numbers, phone numbers, credit cards, and addresses into reversible cryptographic tokens before payloads reach external networks.
SECRET & TOKEN INTERCEPT
Identifies leaked AWS access keys, GitHub tokens, and private SSH certificates embedded in prompt context or agent outputs, terminating the exfiltration attempt.
HIPAA & PHI SANITIZATION
Enforces 18 HIPAA Safe Harbor identifiers detection on all outbound calls, ensuring healthcare AI agents remain compliant with federal privacy statutes.
SUBSYSTEM 04

Cryptographic Proof-of-Action Audit Ledger

TAMPER-PROOF SHA-256 HASH CHAIN

Standard application logs can be altered or deleted. Sentrium chains every intercepted event into a cryptographic Merkle ledger. Each log entry contains the SHA-256 hash of the preceding entry, producing mathematically verifiable proof of every agent action and policy evaluation.

FORENSIC PROVENANCE
Every record logs model version, system prompt hash, exact input arguments, executed payload, and the specific Rego policy rule that permitted or blocked it.
SIEM STREAMING INTEGRATION
Real-time event streaming directly into Splunk, Datadog, AWS CloudWatch, and Snowflake using Common Event Format (CEF) and JSON-Lines formats.
REGULATORY EXPORT
One-click compliance packet generation formatted for EU AI Act Article 12 audits, SOC2 Type II examinations, and ISO/IEC 42001 certification bodies.
SUBSYSTEM 05

Human-in-the-Loop Escalation & Kill-Switch Gates

ARTICLE 14 HUMAN OVERSIGHT

High-risk or privileged autonomous actions—such as infrastructure provisioning, IAM credential changes, or bulk disbursements—are intercepted and routed to human review channels before network delivery.

MULTI-CHANNEL 2FA APPROVAL
Dispatches authenticated approval cards to Slack, Microsoft Teams, and Webhooks with 15-minute cryptographic time-to-live (TTL) expiration.
EMERGENCY FLEET KILL-SWITCH
Sub-20ms emergency quarantine API (POST /v1/clusters/quarantine) severs outbound network egress across all containers during security incidents.
SIGN-OFF ATTESTATION
Every human approval attaches an immutable cryptographic signature (WebAuthn/FIDO2) directly to the SHA-256 audit ledger satisfying EU AI Act Art. 14.
HARDWARE & BENCHMARKS

Technical Specifications & Performance Profile

Engineered for high-throughput, low-latency production clusters. Minimal resource footprint with zero garbage collection pauses.

PARAMETER EBPF SIDECAR KUBERNETES WASM SIDECAR REGIONAL REVERSE PROXY
Evaluation Latency (p50) 0.4ms 1.8ms 18.4ms
Evaluation Latency (p99) 1.2ms 3.4ms 41.8ms
Peak Throughput / Instance 92,000 req/sec 34,000 req/sec 250,000 req/sec (clustered)
Memory Footprint 18 MB RSS 32 MB RSS Auto-scaling edge nodes
CPU Utilization (Under Load) < 0.05 vCPU < 0.12 vCPU Fully managed infrastructure
Policy Engine eBPF Kernel Bytecode Compiled Wasm OPA Rego Distributed Rust / OPA Core
Supported Protocols TCP, HTTPS, gRPC, WSS HTTP/1.1, HTTP/2, gRPC HTTPS, HTTP/2, WebSockets
Audit Encryption Local AES-256-GCM + KMS Local AES-256-GCM + KMS TLS 1.3 + HSM-backed AES-256
Availability SLA Host-dependent Pod-dependent 99.995% contractually backed
IMPLEMENTATION ROADMAP

Integrate Sentrium into Your Agent Pipeline

Deploy a test cluster in under 15 minutes using our official Helm chart or Docker Compose manifest.

Deploy Gateway Now Compare Pricing Plans