cd /news/ai-agents/show-hn-governor-a-firewall-for-ai-a… · home › topics › ai-agents › article
[ARTICLE · art-161282] src=bsvkey-governor-demo.fly.dev ↗ pub= topic=ai-agents verified=true sentiment=· neutral

Show HN: Governor, a firewall for AI agent spend and tool calls

A developer released Governor, a Node 18+ dependency-free proxy that sits between AI agents and Anthropic, OpenAI or xAI APIs to enforce per-agent spending caps and tool-call rules, with every decision signed into an audit log. Governor inspects tool calls inside each model reply before the agent receives them, blocking calls a rule denies and holding calls a rule flags for human approval, with rules checked in order and unmatched calls passing through. Setup requires changing the SDK base URL and issuing each agent its own Governor key with its own caps and tool rules.

read1 min views7 publishedOct 31, 2026

Each button makes a scripted agent call an AI model through Governor. The model here is fake (no real AI, no cost), but every call goes through the real Governor, and every decision is signed into its audit log. No sign-up.

1. Make the agent act #

...

The rules on this agent's key #

...

Checked in order; the first rule that matches a tool call decides it. Calls no rule matches pass.

2. What Governor decided #

Press a button on the left. Results show here, newest first.

How this works in your own setup #

  1. Governor runs as a small proxy (Node 18+, no dependencies) between your agents and Anthropic, OpenAI or xAI.
  2. You change the base URL in your SDK and give each agent its own Governor key with its own caps and tool rules.
  3. Governor sees the tool calls inside each model reply before your agent does. It blocks the ones a rule denies and holds the ones a rule says need a person.
── more in #ai-agents 4 stories · sorted by recency
── more on @governor 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/show-hn-governor-a-f…] indexed:0 read:1min 2026-10-31 · —