{
  "id": 14006236,
  "title": "Prisma AIRS Guardrails for agentgateway in 150 Lines of Python",
  "url": "https://urgent.news/2026/10/12/prisma-airs-guardrails-for-agentgateway-in-150-lines-of-python",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-12T17:18:00.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/webofmike/prisma-airs-guardrails-for-agentgateway-in-150-lines-of-python-1c6o"
  },
  "original_language": "en",
  "account": "Prisma AIRS integrates with agentgateway, a Kubernetes-based deployment, through a 150-line Python adapter. This integration aims to enforce Prisma AIRS' AI runtime security policies on LLM responses. The adapter translates Prisma AIRS' API format to fit agentgateway's webhook format, masking sensitive data like SSNs and card numbers. If Prisma AIRS is unreachable, agentgateway fails closed, preventing LLM calls. The adapter, deployed in a separate namespace, forwards the caller's ID for reporting. The whole setup requires only a single policy manifest on the gateway side, streamlining security enforcement.",
  "summary": "Originally published at webofmike.com on 2026-10-12. The demo repo and every command in it were run before publishing. Plenty of security teams already run Prisma AIRS , Palo Alto's AI runtime security service, and they want every prompt and LLM response checked by it. I wired it into Solo Enterprise for agentgateway on Kubernetes with one policy and a 150-line Python adapter. Injection prompts…",
  "key_points": [
    "Prisma AIRS integrates with agentgateway via 150-line Python adapter",
    "Adapter translates Prisma AIRS API to fit agentgateway's webhook format",
    "Agentgateway fails closed if Prisma AIRS is unreachable"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}