What is an AI Control Pack?

AI Control Pack is the enterprise-facing name for an OAP Policy Pack. Each pack defines rules for a capability, such as finance.payment.refund.v1, including limits, assurance requirements, and context validation.

How do I add a policy pack to my endpoint?

Install the Express or FastAPI middleware, configure it with your policy pack ID, and wrap your sensitive routes. The middleware calls the verify API before each request.

Can I customize policy pack limits?

Yes. Organizations can customize limits (e.g., max refund amount, export row count) per policy pack. Limits are enforced at verification time.

Back to Policy Packs

Financial Transaction Execution Policy

Pre-action governance for agent-initiated financial transactions like trades or transfers. Enforces rules on asset classes, exposure limits, and account types.

v1.0.0

Requirements

Required Capabilities

finance.transaction

Minimum Assurance Level

Required Limits

allowed_transaction_types

allowed_asset_classes

max_exposure_per_tx_usd

allowed_source_account_types

restricted_source_account_types

max_exposure_per_counterparty_usd

approval_required

Enforcement Rules

These rules are automatically enforced when using this policy pack

transaction_type_allowed

asset_class_allowed

exposure_limit_enforced

account_segregation_enforced

segregation_of_funds_enforced

counterparty_exposure_enforced

idempotency_required

Best Practices

Cache /verify with ETag; 60s TTL
Subscribe to status webhooks for instant suspend
Log all transaction attempts for Verifiable Attestation
Implement daily exposure tracking per counterparty to prevent concentration risk
Always use unique idempotency keys to prevent duplicate transactions
Maintain strict segregation between client and proprietary funds
Monitor counterparty exposure limits to prevent over-concentration
Implement real-time balance checks before transaction execution
Use progressive limits for new counterparties
Maintain audit trails for all financial transactions