Provenance-Gate

Provenance-Gate is a tool that acts as a deterministic gateway between AI agents and their tool calls, tracking the origin of each argument value to prevent prompt-injection attacks. It distinguishes control values from user prompt text and untrusted outputs, blocking suspicious actions while minimizing false positives. Unlike classifiers that analyze text content, it focuses on the provenance of values to improve robustness against obfuscated or translated injections.