OpenAPPA is a deterministic security framework that controls what data agents can send to which tools using declarative TOML policies. It achieved zero successful attacks across 1,320 evaluations while completing 88–90% of tasks, outperforming competing solutions like Microsoft FIDES and Claude Code auto mode.