AWS Dogwood lets you block AI agent tool chains that look legit but break policy
AWS open‑sources Dogwood, a Cedar‑based policy language that evaluates entire sequences of AI agent tool calls, not just individual requests. It lets teams enforce prerequisites, rate limits, and ordering, catching “valid‑but‑wrong” actions before they run. The framework is now part of Bedrock AgentCore Policy under Apache 2.0.