Policy, audit, and approval layer for AI agents.
AgentOps Firewall mediates risky AI agent actions. Instead of letting an agent directly send emails, delete files, call external APIs, modify databases, deploy code, or run terminal commands, the agent submits a proposed action to the firewall. The firewall validates the agent's identity, evaluates the request against a policy set, optionally routes it through a human reviewer, and produces a complete audit trail.
- Backend (Java 21, Spring Boot 3.3) — REST API, JWT + agent-key auth, policy engine, approval workflow with a scheduled expiry sweeper, agent action-completion callback, append-only audit log, Kafka + RabbitMQ publishers and consumers (after-commit fan-out), a live SSE activity feed, and fixed-window rate limiting. 147 Surefire + Failsafe tests on H2 (including CORS and rate-limit regression suites).
- Frontend (Angular 18 standalone) — login, role-aware dashboard shell, action feed, policy management, simulator, approval inbox with live SSE updates, audit-log viewer, analytics with hand-rolled bar charts. 57 Karma unit specs across guards, interceptors, services, the HTTP data layer, and the event-stream client; Playwright e2e suite (smoke, approval-flow, screenshots).
- Infra — Docker Compose for Postgres / Kafka / RabbitMQ, multi-stage Dockerfiles for backend + frontend, GitHub Actions CI, Terraform-ready AWS skeleton (docs only).
For the request-flow walkthrough, see docs/architecture.md.
For the endpoint reference, see docs/api.md.
For screenshots of every dashboard page, see docs/screenshots/.
| Layer | Technology |
|---|---|
| Frontend | Angular 18 (standalone), TypeScript, RxJS, Tailwind CSS |
| Backend | Java 21, Spring Boot 3.3, Spring Security, REST |
| Persistence | PostgreSQL 16, Flyway migrations, Spring Data JPA |
| Streaming | Apache Kafka 3.7 in KRaft mode (via confluentinc/cp-kafka) |
| Work queue | RabbitMQ |
| DevOps | Docker, Docker Compose, GitHub Actions |
| Testing | JUnit 5, Mockito, Spring Boot Test, Karma/Jasmine, Playwright |
| Infra (docs) | Terraform-ready AWS skeleton |
AgentOpsFirewall/
├── backend/ # Spring Boot 3 service (Java 21)
├── frontend/ # Angular dashboard
├── infra/ # Terraform skeleton + architecture diagrams
├── docs/ # Architecture, API, cloud, decisions, troubleshooting, screenshots
├── .github/ # CI workflows
├── docker-compose.yml
├── CLAUDE.md # Guardrails for AI-assisted development sessions
└── README.md
- JDK 21 (Eclipse Temurin recommended)
- Node 20+ and npm
- Docker with Docker Compose v2
- ~10 GB free disk — Postgres + Kafka + RabbitMQ images plus Maven /
npm caches and Docker's WSL VM all add up; see
docs/troubleshooting.md#6if you run low.
Docker Desktop note. Some 4.6x builds of Docker Desktop have a regression in the containerd image store that extracts certain image layers as zero-byte files (
exec format erroron container start). If you hit it, Settings → General → uncheck "Use containerd for pulling and storing images" → Apply & Restart. Seedocs/troubleshooting.mdfor the full diagnostic.
git clone <this-repo>
cd AgentOpsFirewall
cp .env.example .env # fill placeholders if needed
cp backend/.env.example backend/.env
cp frontend/.env.example frontend/.env.env files are gitignored. The defaults are safe for local development.
# 1. Bring up the data plane.
docker compose up -d postgres kafka rabbitmq
# 2. Backend (in one terminal).
cd backend
./mvnw spring-boot:run
# 3. Frontend (in another terminal).
cd frontend
npm install
npm startOpen http://localhost:4200 and sign in with one of the demo accounts below.
| Username | Password | Role | Sees |
|---|---|---|---|
| admin | admin123 | ADMIN | Everything |
| reviewer | reviewer123 | REVIEWER | Everything except agent/policy writes |
| viewer | viewer123 | VIEWER | Read-only; no approval inbox |
These are seeded by Flyway migration V2__seed_local_demo_users.sql
under the local Spring profile. They are not safe for any
non-development environment.
# Log in as admin.
TOKEN=$(curl -sS -X POST http://localhost:8080/api/auth/login \
-H 'Content-Type: application/json' \
-d '{"username":"admin","password":"admin123"}' | jq -r .token)
# Hit a protected endpoint.
curl -sS http://localhost:8080/api/dashboard/summary \
-H "Authorization: Bearer $TOKEN"# Backend (Surefire unit + Failsafe integration)
cd backend && ./mvnw verify
# Frontend unit tests (Karma + ChromeHeadless)
cd frontend && npm test
# Frontend end-to-end (Playwright)
# Requires backend and frontend running locally first.
cd frontend
npx playwright install chromium # one-time
npm run test:e2eCI runs the first two on every push and pull request. The e2e suite is
gated behind a manual workflow_dispatch (.github/workflows/e2e.yml)
to keep PR feedback fast.
| Symptom | Cause / fix |
|---|---|
Connection refused on port 5432 |
docker compose ps — Postgres still starting; healthcheck takes ~10s. |
| Backend boots but Flyway fails | Stale schema from a previous run. docker compose down -v wipes the volume. |
npm start complains about Node version |
Angular 18 requires Node 18.19+ or 20.11+. node --version. |
mvn not found |
Use the wrapper: ./mvnw (or mvnw.cmd on Windows). |
| Login returns 500 | JWT signing key not set. Confirm JWT_SECRET in backend/.env or use the local default. |
| Karma tests can't find Chrome | Install Chrome stable, or set CHROME_BIN to your Chrome path. |
For deeper diagnostics — Docker image extraction, Kafka networking
across the host / container boundary, CORS misconfiguration, disk
recovery — see docs/troubleshooting.md.
Eight full-page captures from the live local stack — backend, frontend, Postgres, Kafka, and RabbitMQ all running. Click any thumbnail to view full size.
| Page | Preview |
|---|---|
| Login |  |
| Dashboard overview |  |
| Action feed |  |
| Policies |  |
| Policy editor |  |
| Simulator |  |
| Approval inbox |  |
| Audit log |  |
See docs/screenshots/README.md for the
capture guidance and the npm run screenshots regeneration steps.
docs/architecture.md— components, request flow, policy evaluation, approval workflow, audit log, DB layoutdocs/api.md— full REST endpoint reference with curl recipesdocs/cloud-architecture.md— local → AWS / Azure mapping, free-local-dev guarantee, cost notesdocs/decisions.md— engineering decisions (Kafka vs RabbitMQ, Flyway vs Liquibase, Playwright vs Cypress, etc.)docs/troubleshooting.md— diagnostic guide for the issues most likely to surface during local bring-up (Docker Desktop image extraction, Kafka networking, CORS, disk recovery)infra/terraform/aws/README.md— Terraform blueprint (documentation only)
Released under the MIT License — © 2026 Gaurav Singh.