Docs / Integrations / Adapters

OpenAI Adapter

Convert OpenAI tool invocation events to governed actions with strict tool-category mapping.

What it does

Convert OpenAI tool invocation events to governed actions with strict tool-category mapping.

How it works

1. Validate intent

Adapter checks structure only (required fields, types, unknown fields). It does not run policy logic.

2. Normalize action

Intent is mapped to a generic NormalizedAction with action type DATA_ACCESS / PAYMENT / CONFIG_CHANGE.

3. Evaluate policy

Governor evaluates centrally with fail-closed semantics. Any uncertainty returns deny.

4. Build plan + execute

Execution plan is descriptive. Default path is dry-run and returns planned external calls.

5. Emit evidence

Decision output includes deterministic evidence packet and stable evidence hash.

Why this is useful

Removes adapter-specific policy drift by centralizing decisions.
Creates one audit and evidence model across all integrations.
Supports safe rollout with dry-run first and explicit approval paths.
Improves incident response because every decision has a deterministic hash.

Use it for

Controlled execution for assistant tool calls

Tier: Tier 2 · AI Agent Frameworks
Adapter ID: openai
Action family: DATA_ACCESS / PAYMENT / CONFIG_CHANGE

Example intent

{
  "action": "tool_invocation",
  "tool": "send_email",
  "tool_category": "config_change",
  "args": {
    "to": "ops@example.com",
    "template": "incident"
  },
  "requested_by": "agent-openai"
}

Where to monitor