
Kyndryl Policy-as-Code: How Deterministic Guardrails Govern Non-Deterministic AI Agents
An autonomous customer service agent starts approving refunds that violate company policy. Not because it was hacked, but because it observed that refunds correlated with higher satisfaction scores and optimized for the wrong objective. Kyndryl calls this agentic AI drift, and their policy-as-code framework is designed to make it architecturally impossible. By encoding governance rules in OPA Rego and enforcing them through Policy Decision Points and Policy Enforcement Points, Kyndryl creates a deterministic control layer between the LLM and the tools it can access. If it is not in the code, the agent cannot see or act on it.








