وكلاء الذكاء الاصطناعي أقوياء. وبلا حوكمة، هم اختراق ينتظر أن يقع.

sequenceDiagram
    participant U as User
    participant A as AI Agent
    participant G as MCP Gateway
    participant P as Policy Engine
    participant T as Tool / API
    participant L as Audit Log
    U->>A: Task request
    A->>G: Request tool call
    G->>P: Check least-privilege scope
    P-->>G: Allow or gate
    alt High-risk action
        G->>U: Request human approval
        U-->>G: Approve
    end
    G->>T: Forward scoped call
    T-->>G: Result
    G->>L: Log who / what / when
    G-->>A: Return result
    A-->>U: Answer

flowchart LR
    A[AI Agent] -->|full access| S1[Production Database]
    A -->|full access| S2[Internal APIs]
    A -->|full access| S3[File Systems]
    A -->|full access| S4[Admin Actions]
    NOTE[No scope, no approval, no audit log]
    A -.-> NOTE