Your AI agents are making decisions.
Can you prove they followed your policies?

PathReader turns your existing policy documents into deterministic governance rules. Every agent action is checked before it executes. Every decision cites the exact rule, source quote, and policy version that produced it.

See how it works

LLM guardrails aren't compliance

Probabilistic filters catch obvious violations. They don't verify whether an agent included a required disclosure, used the correct reason code, or obtained the right approval. When a regulator asks why your agent made a decision, "the model thought it was fine" is not an answer.

Regulators require a reproducible, rule-referenced decision. The same input must produce the same decision every time, with a citation to the exact policy rule. PathReader provides that. Probabilistic filters cannot.

Probabilistic guardrails
  • Catches obvious harmful output
  • Non-deterministic: same input, different result
  • No audit trail tied to your policy documents
  • Cannot verify approval chains or dollar thresholds
  • Does not satisfy EU AI Act Article 12 or NAIC audit requirements
PathReader
  • Checks every rule sourced from your own policies
  • Deterministic: same input, same decision, always
  • Every decision cites the rule, source quote, and policy version
  • Verifies thresholds, approval chains, and required disclosures
  • Produces the audit log regulators require
How it works

From policy document to governed agent, without writing a single rule

Upload a document, review what PathReader surfaces, approve the rules. Your agents are governed.

1
Upload your policy document

PDFs, compliance handbooks, internal guidelines. PathReader surfaces rule candidates from your document, with the source quote and page number for every rule.

2
Review and approve rule candidates

A human reviews each candidate rule before it goes live. Approve, edit, or reject. Nothing governs without sign-off.

3
Publish a versioned policy set

Approved rules are published into a versioned, auditable policy set. Roll back or retire policies at any time.

4
Evaluate every agent action

Before an agent sends a message, submits a claim, or executes a transaction, a single API call returns a deterministic decision: allow, flag, or block. Every response includes a full decision trace with clause-level citation.

One-time setup
📄
Policy document
PDF, handbook, SOP
🔍
Rule candidates
Source quote + page
👤
Compliance review
Your team approves, edits, rejects
🗂
Active policy version
Versioned, auditable
Every agent action
🤖
Agent proposes action
Message, claim, transaction
PathReader API
Single call, pre-execution
Deterministic decision
block flag allow
Rule Prohibited phrase
Source Client Comms Policy, p.3, clause 2.8
Version v4 · Jun 2026 · user 7479

Not a guardrail. Not an observability tool.

Not an observability tool

Observability platforms tell you why your agent decided after it happened. PathReader evaluates the proposed action before it executes and returns an audit-ready decision at the moment of action.

Not a perimeter gateway

API gateways manage what your agent is permitted to call. They cannot evaluate whether the content of a proposed action complies with the specific rules in your own policy documents.

PathReader is deterministic

PathReader returns a decision. Your agent code determines what happens next: log it, route it for human review, or block the action. From audit-only to mandatory pre-execution gate.

See it in action

Every agent action checked. Every decision cited.

Your agent sends an action request. PathReader checks it against your approved rules and returns a cited decision before anything executes.

Agent output
AI lending agent
Application #A-2291 declined. Insufficient credit score.
PathReader
1
Reads the proposed adverse action
2
Checks CFPB individualized reason rules
3
Returns a cited decision before send
Decision
blockBefore notice sends
RuleAdverse action reason too generic
MissingSpecific score range, contributing factors
"Creditors must provide specific, individualized reasons..." — CFPB Adverse Action Policy, clause 3.2

Notice blocked before delivery. Generic reason violates CFPB individualized disclosure requirement.

Agent output
Claims processing agent
Claim #48821 does not meet coverage criteria under the submitted diagnosis code. Closing as ineligible.
PathReader
1
Reads the proposed denial
2
Checks required disclosure rules
3
Returns a cited decision before submit
Decision
flagHuman review required
RuleAppeal rights disclosure missing
Missingappeal_rights_disclosure
"All adverse determinations must include written notice of the right to appeal..." — Claims Policy, p.11, clause 4.3

Denial held for human review. Missing appeal rights disclosure required by NAIC clause 4.3.

Agent output
Prior authorization agent
PA request for MRI, lumbar spine, approved. Authorization #PA-9934 issued.
PathReader
1
Reads the proposed authorization
2
Checks CMS human review requirement
3
Returns a cited decision before issue
Decision
flagHuman review required
RulePA approval requires licensed clinician sign-off
Missingclinician_approval_id
"Prior authorization decisions must be reviewed and approved by a licensed clinician..." — UM Policy, p.6, clause 2.4

Authorization held pending clinician review. CMS requires human sign-off on all PA decisions per clause 2.4.

Agent output
Grid operations agent
Load balancing adjustment initiated. Reducing output on substation 7 by 38% to compensate for demand spike.
PathReader
1
Reads the proposed grid action
2
Checks NERC CIP operating rules
3
Returns a cited decision before execute
Decision
blockBefore adjustment executes
RuleSingle-substation reduction exceeds 25% limit
Value38%. Limit is 25% without operator approval
"Automated reductions exceeding 25% of substation capacity require operator confirmation..." — Grid Ops Policy, p.9, clause 5.1

Grid adjustment blocked. 38% reduction exceeds the 25% autonomous limit under NERC CIP clause 5.1.

Agent output
Flight scheduling agent
Crew reassignment confirmed. Captain Morris assigned to Flight 441, 9 hours after completing Flight 208.
PathReader
1
Reads the proposed crew assignment
2
Checks FAA rest requirement rules
3
Returns a cited decision before confirm
Decision
blockBefore assignment confirms
RuleMinimum rest period not met
Value9 hrs. FAA minimum is 10 hrs
"Flight crew must have a minimum of 10 consecutive hours of rest before reporting for duty..." — Crew Policy, p.2, clause 1.3

Assignment blocked. 9-hour rest period is below the FAA 10-hour minimum under clause 1.3.

The window to get ahead of this is closing

Regulators across insurance, financial services, and healthcare are converging on the same requirement: AI agents taking consequential actions must produce a documented, traceable audit trail tied to your own policies.

Now · US
NAIC Model Bulletin — 24 states

Insurers must maintain a written AI program with documented governance, validation, and audit rights for every AI system in claims, underwriting, and customer communications.

Now · US
CFPB Circular 2023-03

Creditors must provide specific, individualized reasons for AI-driven adverse actions. Examiners require evidence of testing and validation.

Aug 2026 · EU
EU AI Act — Article 50 transparency obligations

AI systems interacting with people must disclose themselves as AI. Governance documentation required for all systems in scope.

Dec 2027 · EU
EU AI Act — Full high-risk obligations

Insurance, financial services, healthcare, and legal AI must automatically log every decision in enough detail to reconstruct how it was reached, traceable to the governing policy (Article 12). Penalties up to 15M EUR or 3% of global revenue.

Get started

Request access

PathReader is available to teams in regulated industries. We review every request and prioritize organizations ready to deploy.

We respond within 2 business days.