AWS opens Dogwood for agent tool-call history

AWS has open-sourced Dogwood, an Apache 2.0 policy language that lets agent controls inspect the history of tool calls rather than only the request in front of them. The AWS announcement describes four common temporal operations—whether something happened, how often, how many distinct values, and the running total—and shows why concurrency matters: three simultaneous $2,000 transfers can slip past a $5,000 cap if the rule counts settled responses instead of requests. Teams building the agent control planes now surrounding coding workflows should file Dogwood as a governance primitive, but also budget for trusted event history and the loss of Cedar’s automated reasoning on temporal policies.