# Prism-Shield

One canonical identity. Human page: https://www.insightits.com/products/prism-shield.html

| Field | Value |
|-------|-------|
| Slug | `prism-shield` |
| Status | published |
| Family | aiSecurity |
| Infra category | AI Security |
| Record type | product |
| Parent | — |
| JSON | https://www.insightits.com/catalog/prism-shield.json |
| Markdown | https://www.insightits.com/catalog/prism-shield.md |
| GitHub | https://github.com/insightitsGit/Prism-Shield |
| PyPI | https://pypi.org/project/prism-shield/0.2.1/ |
| Install | `pip install prism-shield (pin ==0.2.1). Apache-2.0 open core; commercial SKU under EULA. Soft CTA SHIELD — mailto:info@insightits.com?subject=SHIELD.` |
| Version | 0.2.1 |

## What it is

Runtime zero-trust gateway between agent extractions and enterprise DAGs. Canonicalize → policy/schema → seal ParameterManifest → KMS-attest → ACCEPT / REVIEW / REFUSE. Apache-2.0 open core; depends prismmanifest>=0.3.4.

## Problem

Unvetted probabilistic output must not become deterministic side effects at runtime — CI (Prism-Eval) is not enough once the agent is live.

## Alternatives

- **Ungated agent → DAG execute** — No published competitor bake-off. Companion to Prism-Eval (CI) and PrismManifest (library).

## Features

- **Fail-Closed Policy & Schema** — Unknown policy_id or schema_hash refuses. Versioned policies and published schema hashes are allowlists, so the gateway never invents trust for an ID it has not seen.
- **Sealed ParameterManifest + KMS Attestation** — ACCEPT seals a FlatBuffer ParameterManifest signed through a KMS envelope backend (Azure Key Vault, AWS KMS, GCP, or local), enforced by the C++ gate when loaded, else the Python hard gate.
- **ACCEPT / REVIEW / REFUSE** — REVIEW seals a PASS_WITH_HUMAN manifest and queues an escalation for human review; REFUSE hard-blocks. Replay receipts stop a sealed decision being replayed into the DAG.

## Architecture

Fail-closed unknown policy_id / schema_hash. ACCEPT seals a FlatBuffer ParameterManifest signed through a KMS envelope (Azure Key Vault, AWS KMS, GCP, or local), enforced by the C++ gate when loaded, else the Python hard gate.

## Use cases

- LangGraph access-control middleware in front of money DAGs
- CrewAI runtime guardrails at execute time
- Human-in-the-loop REVIEW when policy requires it

## Benchmarks

No published vendor benchmark for this product. Do not invent metrics.

### Disclosures

- No published vendor benchmark for this product. Do not invent metrics.



## GitHub

https://github.com/insightitsGit/Prism-Shield

## PyPI

https://pypi.org/project/prism-shield/0.2.1/

## Documentation

- [Commercial terms](https://www.insightits.com/legal/prism-shield-commercial.html)
- [Prism-Eval (CI companion)](https://www.insightits.com/products/prism-eval.html)
- [Compose with VectorPrism / Manifest / Eval](https://www.insightits.com/products/prism-shield.html#compose)
- [https://github.com/insightitsGit/Prism-Shield](https://github.com/insightitsGit/Prism-Shield)
- [https://pypi.org/project/prism-shield/0.2.1/](https://pypi.org/project/prism-shield/0.2.1/)
- [https://www.insightits.com/products/prismmanifest.html](https://www.insightits.com/products/prismmanifest.html)
- [https://www.insightits.com/products/prismguard.html](https://www.insightits.com/products/prismguard.html)
- [codespaces](https://codespaces.new/insightitsGit/Prism-Shield)

## Is not

- Another agent framework
- PrismGuard
- SOC2-certified (control-mapped ≠ certified)
- Hosted HITL as the Stripe SKU (Coming for Team+)

## Related products

- [prism-eval](./prism-eval.md)
- [prismmanifest](./prismmanifest.md)
- [vectorprism-demo](./vectorprism-demo.md)