Architecture
AegisGate is a six-pillar AI security gateway built in Go with zero external runtime dependencies.
Six Security Pillars
┌─────────────────────────────────────────────────────┐
│ AegisGate v4.4.0 │
├─────────┬─────────┬─────────┬──────────┬──────────┤
│ HTTP │ MCP │ A2A │ ACP │ ANP │
│ API │Protocol │ Protocol│Protocol │Protocol │
├─────────┴─────────┴─────────┴──────────┴──────────┤
│ RESPONSE │
│ (Output Safety Layer) │
├─────────────────────────────────────────────────────┤
│ ML Detection Engine │
│ (CNN-BiLSTM + Regex Pipeline) │
├─────────────────────────────────────────────────────┤
│ Trust & Compliance Engine │
│ (31 Frameworks · 2,043 controls) │
├─────────────────────────────────────────────────────┤
│ Audit & Evidence Engine │
│ (ATLAS-Mapped · SOC 2 Evidence) │
└─────────────────────────────────────────────────────┘
Request Flow
- Ingress: Client request arrives at one of the five protocol pillars
- Screening: ML engine classifies the request (regex + neural network)
- Policy: Trust engine applies compliance rules and rate limits
- Forward: Clean requests are forwarded to the upstream AI service
- Response: AI response is filtered through the RESPONSE pillar
- Audit: Full detection evidence is logged with ATLAS mapping
Technology Stack
| Component | Technology |
|---|---|
| Core | Go 1.26+, statically compiled |
| ML Runtime | ONNX Runtime (optional, graceful degradation) |
| Container | Docker (19.1MB image) |
| Orchestration | Kubernetes (Helm chart provided) |
| Observability | Prometheus metrics, structured JSON logging |
| Dependencies | Zero external runtime dependencies |
See also: Performance and Deployment.