Back to Policy Packs

Agent Session Creation Policy

Pre-action governance for AI agent session creation. Enforces session limits, duration restrictions, concurrent session controls, and resource allocation for secure multi-session agent deployments.

v1.0.0

Requirements

Required Capabilities

agent.session.create

Minimum Assurance Level

L0

Required Limits

max_sessions_per_user
max_session_duration

Enforcement Rules

These rules are automatically enforced when using this policy pack

session_limit_enforced
duration_limit_enforced
concurrent_session_enforced
resource_quota_enforced
session_type_enforced

Best Practices

  • Enforce session limits per user to prevent resource exhaustion
  • Set maximum session durations to prevent zombie sessions
  • Limit concurrent sessions to manage system load
  • Track session creation for billing and auditing
  • Use session types to apply different policies
  • Implement session tagging for organization and tracking
  • Monitor session creation patterns for anomalies
  • Log all session creations for Verifiable Attestation
  • Subscribe to status webhooks for instant suspend
  • Implement progressive limits for new users