AgentCore adds history-aware policies and gateway rate limits
Amazon Bedrock AgentCore added temporal policies powered by the open Dogwood language plus identity-scoped gateway limits for requests, tokens, and connections, moving multi-step authorization and cost ceilings outside agent code.
Why it matters: A tool call can be valid alone but unsafe after earlier actions. Session-aware policy lets operators require approvals, enforce sequence, cap cumulative value, and observe decisions before switching enforcement on.