AWS Open-Sources Dogwood, Extending Cedar to Govern Sequences of Agent Tool Calls
AWS open-sourced Dogwood, a policy language for agent tool calls that extends Cedar with temporal conditions capable of inspecting an agent's event history. Unlike Cedar's stateless, single-request evaluation, Dogwood supports operators like `formerly`, `count_within`, and `sum_within` to enforce constraints across sequences—such as cumulative spending limits or approval gates before sensitive actions. The language ships under Apache 2.0, is supported by AgentCore Policy, and is built as a separate language to preserve Cedar's formal verification capabilities, which temporal conditions forfeit.