davsclaus opened a new pull request, #27436: URL: https://github.com/apache/camel/pull/27436
## Summary Adds a user manual page, **Governed AI Agents** (under Security in the nav). It brings together the 4.23 pieces for governing what an AI agent may do, which are so far spread across component docs and blog posts. In Camel a tool is a route, so the route that does the work also checks each tool call: | Question | Building block | |---|---| | Who is calling? | SPIFFE workload identity and mutual TLS | | May they do this? | `authorizationPolicy` on `ai-tool`, with OPA (in-process WebAssembly) or OpenFGA; Keycloak, Shiro, Spring Security also fit | | Does this action make sense? | Semantic language guard decisions with a System One model (TypeSafe AI / Jev) | | What happened? | GenAI observability: OpenTelemetry spans and Micrometer metrics per LLM call | The page also covers: - the two rules that make the decision trustworthy: the tool name comes from the route, and the caller from an exchange property, never a header; - how in-route checks relate to a perimeter proxy (Wanaku); - links to the `ai-tools-spiffe-opa` example and the September/October blog posts. Examples are in Java, XML and YAML using `[tabs]`. The Semantic declarations have Java and YAML only. All examples are taken from the component docs, and the YAML is written in the canonical form. ## Why draft The `components::` xrefs point at the 4.23 component pages: spiffe, opa, openfga, semantic, typesafe-ai, ai-observability. Those pages are only published once 4.23.0 is released, so this should be merged after the release, which is planned for next week. ## Test plan - [x] `UserManualDocExamplesTest` (camel-yaml-dsl-validator): every YAML route example of the manual validates - [x] `CatalogDocJavaExamplesTest` (camel-jbang-core): Java examples of the manual parse - [x] `camel validate yaml --canonical --catalog` and `camel validate source` on the extracted YAML and XML snippets - [x] Checked that every xref target page exists under `docs/components` _Claude Code on behalf of davsclaus_ 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
