OpenAI Agent Guardrails with Veto

import OpenAI from 'openai'
import { protect } from 'veto-sdk'

const openai = new OpenAI()

// Define your tools
const tools = [
  {
    type: 'function',
    function: {
      name: 'send_email',
      description: 'Send an email to a customer',
      parameters: {
        type: 'object',
        properties: {
          to: { type: 'string' },
          subject: { type: 'string' },
          body: { type: 'string' },
        },
        required: ['to', 'subject', 'body'],
      },
    },
  },
  {
    type: 'function',
    function: {
      name: 'process_payment',
      description: 'Process a payment',
      parameters: {
        type: 'object',
        properties: {
          amount: { type: 'number' },
          currency: { type: 'string' },
        },
        required: ['amount'],
      },
    },
  },
]

// Wrap with Veto for authorization
const protectedTools = await protect(tools, {
  apiKey: process.env.VETO_API_KEY,
  policyPath: './veto/rules',
})

// Use normally with GPT-4, GPT-4o, or GPT-5
const response = await openai.chat.completions.create({
  model: 'gpt-4o',
  messages: [{ role: 'user', content: 'Send a welcome email' }],
  tools: protectedTools,
})

// Tool calls are now authorized before execution
const toolCall = response.choices[0].message.tool_calls?.[0]
if (toolCall) {
  // Veto already validated this action against your policies
  console.log('Authorized tool call:', toolCall.function.name)
}

# veto/rules/openai-policies.yaml
version: "1.0"
name: OpenAI agent guardrails

rules:
  # Block emails to competitors
  - id: block-competitor-emails
    name: Block competitor email domains
    action: block
    tools: [send_email]
    conditions:
      - field: arguments.to
        operator: matches
        value: "@competitor\\.com$"
    message: "Cannot send emails to competitor domains"

  # Require approval for large payments
  - id: review-large-payments
    name: Review payments over $500
    action: require_approval
    tools: [process_payment]
    conditions:
      - field: arguments.amount
        operator: greater_than
        value: 500
    approvers: [finance-team]

  # Block payments outside business hours
  - id: block-after-hours-payments
    name: No payments outside 9-5
    action: block
    tools: [process_payment]
    conditions:
      - field: context.time.hour
        operator: less_than
        value: 9
      - field: context.time.hour
        operator: greater_than
        value: 17
    message: "Payments require business hours approval"