How OpenRouter launched on X

OpenRouter Armor, in beta as of October 2026, reviews every tool call an agent proposes and holds it until the call is checked against policy. It is for teams running agents through OpenRouter whose tools can execute shell commands, push code, delete files, or send credentials off the machine. Regex filters often miss those calls when the same action can be written many ways. Armor sends the proposed call, the conversation so far, and rules written in plain English to TypeSafe's Jev decision model, which returns a probability that the call matches each rule. A hard-deny rule describes an action that must never happen, such as sending environment variables or credentials outside a trusted repository, and a match blocks the call even if the user asked for it. A soft-deny rule describes an action that is usually wrong but sometimes legitimate, such as deleting a directory, and a match blocks unless an allow rule also matches or the user requested that exact operation in the conversation. Flagged calls are not forwarded to the application. The model is told which rule fired and not to retry the same arguments, then it continues. Any agent on OpenRouter can opt in by adding the armor plugin with its own rules. Through the Ori harness, Armor also answers Claude Code's auto permissions format, so that mode works with models OpenRouter serves rather than only with Anthropic's classifier. OpenRouter, founded in 2023 by Alex Atallah and Louis Vichy, is a single API for calling models from many providers. Armor is the gateway's check on tool calls, the step where a model proposes an action instead of only returning text. The plugin remains in beta, and OpenRouter says the configuration and the shape of a blocked call may still change.