LangChain Tool Approval - Attesta

Scenario

A LangChain agent can run both read-only and destructive tools. We want low-friction reads and strict gating for writes.

Example App

Reference implementation: examples/langchain-tooling-approval/

wraps tools with AttestaToolWrapper
applies per-tool risk overrides
keeps audit consistency across tool invocations

Core Pattern

from attesta import Attesta
from attesta.integrations.langchain import AttestaToolWrapper

attesta = Attesta.from_config("attesta.yaml")
wrapper = AttestaToolWrapper(attesta, risk_overrides={"restart_production_service": "critical"})
protected_tools = wrapper.wrap_tools(tools)

Production Notes

classify tools by side-effect class (read/write/irreversible)
enforce critical overrides for infrastructure mutation tools
monitor denied/escalated rates to tune challenge friction