IBM contributes policy engine to Praxis for AI access controls

IBM says it has contributed the Praxis Policy Engine to the open-source Praxis proxy server in collaboration with Red Hat. The engine applies policies to tools, prompts, resources, model calls and other agents, using verified state outside the model's control to enforce identity, delegation and content rules. Teams can deploy the controls at a gateway, beside an agent or inside a framework. The engine can also generate security audit records with optional signatures and hash chaining to reveal later changes. Each deployment protects only operations that cross it; IBM plans further testing of whether agents and tools can bypass combinations of host isolation and network controls.