Governance Engine#

MUTX integrates Faramesh by Faramesh Technologies to provide deterministic AI agent governance. Governance decisions are enforced at runtime through FPL (Faramesh Policy Language) policies.

Overview#

Faramesh runs as a daemon alongside MUTX, communicating via Unix socket at /tmp/faramesh.sock. When an agent attempts a tool call, Faramesh evaluates it against the active policy and returns PERMIT, DENY, or DEFER.

CLI Commands#

Daemon Management#

# Start the governance daemon (auto-installed during `mutx setup hosted`)
mutx governance start

# Check daemon health
mutx governance status

# Stream live decisions
mutx governance tail

Inspect Decisions#

# View recent decisions
mutx governance decisions --limit 50

# View pending approvals (DEFER queue)
mutx governance pending

# View metrics
mutx governance metrics

# Export metrics (Prometheus format)
mutx governance export-metrics --format prometheus

Approval Actions#

# Approve a deferred action
mutx governance approve <defer_token>

# Deny a deferred action
mutx governance deny <defer_token>

# Emergency kill an agent
mutx governance kill <agent_id>

Policy Management#

# List bundled policy packs
mutx governance policy list

# Validate a policy file
mutx governance policy validate ./my-policy.fpl

# Hot-reload the running policy (no daemon restart)
mutx governance policy reload

# Edit policy in $EDITOR
mutx governance policy edit
mutx governance policy edit --policy ./custom-policy.fpl

Credential Broker#

# List registered credential backends
mutx governance credential list

# Register a credential backend
mutx governance credential register vault my-vault --path secret/data/stripe --ttl 15m

Supported backends: vault, awssecrets, gcpsm, azurekv, onepassword, infisical

Bundled Policy Packs#

MUTX ships with several policy packs in cli/policies/:

FPL Policy Language#

Policies are written in FPL, a purpose-built language for agent governance:

agent payment-bot {
  default deny
  model "gpt-4o"
  framework "langgraph"

  budget session {
    max $500
    daily $2000
    max_calls 100
    on_exceed deny
  }

  rules {
    deny! shell/* reason: "never shell"

    defer stripe/refund when amount > 500
      notify: "finance"
      reason: "high value refund"

    permit stripe/* when amount <= 500
  }
}

Rule Effects#

Key FPL Concepts#

• Phase blocks — Scope tool visibility by workflow stage
• Budget blocks — Session/daily spend limits
• Ambient blocks — Cross-session rate limiting
• Selector blocks — External data fetching at evaluation time
• Credential blocks — Credential broker configuration

Architecture#

┌─────────────────────────────────────────────────────────┐
│                      MUTX CLI / TUI                      │
└────────────────────────┬────────────────────────────────┘
                         │ socket /tmp/faramesh.sock
                         ▼
┌─────────────────────────────────────────────────────────┐
│              Faramesh Governance Daemon                  │
│  - Evaluates tool calls against FPL policy              │
│  - Issues PERMIT / DENY / DEFER decisions                │
│  - Manages credential broker                            │
└─────────────────────────────────────────────────────────┘

Prometheus Metrics#

The /v1/governance/metrics endpoint exports Prometheus metrics:

# HELP mutx_governance_decisions_total Total governance decisions by effect
# TYPE mutx_governance_decisions_total counter
mutx_governance_decisions_total{effect="permit"} 42
mutx_governance_decisions_total{effect="deny"} 3
mutx_governance_decisions_total{effect="defer"} 5

# HELP mutx_governance_pending_approvals Pending approval count
# TYPE mutx_governance_pending_approvals gauge
mutx_governance_pending_approvals 2

# HELP mutx_governance_daemon_up Daemon availability
# TYPE mutx_governance_daemon_up gauge
mutx_governance_daemon_up 1

Further Reference#

• Faramesh Documentation
• FPL Language Reference
• Faramesh Core on GitHub