Resources / Video
Governing a Slack agent
An agent with Slack access, governed call by call: what gets through, what gets stopped, and what the audit log records.
Video · 7 August 2026
What this shows
Messaging is one of the most consequential things an agent can do without anyone noticing. This walkthrough puts a Slack-connected agent under Firma and shows what changes.
Firma intercepts the agent’s outbound call to Slack and normalizes it into the canonical action class communication.external.send, along with the structured detail the policy needs: provider, channel, message content. A Cedar policy then decides, per call, whether the message goes out, allowing routine posts to a team channel while stopping sends that fall outside the agent’s granted scope. Every decision, allowed or denied, produces a signed audit record showing exactly what the agent tried to do and under which rule it was resolved.
The point of the demo: the agent is not modified, the Slack integration is not modified, and enforcement still happens on every single call.