Test Before Release, Enforce at Runtime: Governance for Tool-Using AI Agents

AI agents increasingly invoke APIs, access sensitive data, and take actions with real consequences. Governance cannot remain a document reviewed only after deployment. This session presents a practical two-layer approach: build-time tests for policy compliance, answer grounding, and tool-use trajectories, followed by runtime enforcement using versioned tool contracts. Attendees will see how to detect contract drift, validate scope and side effects, require confirmation for sensitive actions, block unsupported tool calls, and preserve an audit trail explaining every decision.