> ## Documentation Index
> Fetch the complete documentation index at: https://docs.domesystems.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Tutorials

> Hands-on tutorials for building with Dome

## Get Started

Govern an agent end to end in a sandbox.

<CardGroup cols={2}>
  <Card title="Govern your first agent" href="/tutorials/get-started/govern-your-first-agent">
    Allow employee lookups, redact contact details, and deny payroll — from Cursor, Claude, or curl.
  </Card>

  <Card title="Call a model through a pool" href="/tutorials/get-started/call-a-model-through-a-pool">
    Route chat through a model pool with failover, authorization, and your provider key held server-side.
  </Card>

  <Card title="Build a governed app" href="/tutorials/get-started/build-a-governed-app">
    Wire model and tool calls in one app, then click through allow, redact, and deny.
  </Card>

  <Card title="Govern per end user" href="/tutorials/get-started/govern-per-end-user">
    The agent inherits each user's permissions — same agent, different tool access and answers per person.
  </Card>
</CardGroup>

## Role

Learn what developer, security, operator, and platform admin each own on Dome — guided sandbox walks for each persona.

<CardGroup cols={2}>
  <Card title="Developer" href="/tutorials/role/developer">
    Register an agent, call tools through a Gateway, and confirm allow and deny in audit.
  </Card>

  <Card title="Security" href="/tutorials/role/security">
    Author and simulate Cedar, redact sensitive fields, prove denials, and export evidence.
  </Card>

  <Card title="Operator" href="/tutorials/role/operator">
    Stand up the substrate: attach tools, expose a Gateway, grant access, and watch audit.
  </Card>

  <Card title="Platform Admin" href="/tutorials/role/platform-admin">
    Set who may administer Dome, check platform health, and export an audit snapshot.
  </Card>
</CardGroup>

## Production

Diagnose a live denial, put an existing LLM client under Dome, deploy a working agent, or use OIDC or bound act-as.

<CardGroup cols={2}>
  <Card title="Debug a tool call denial" href="/tutorials/production/debug-a-denial">
    Gateway admission, Cedar, and audit.
  </Card>

  <Card title="Adopt an existing app" href="/tutorials/production/adopt-an-existing-app">
    Repoint an LLM client at Dome without rewriting logic.
  </Card>

  <Card title="Deploy your agent" href="/tutorials/production/deploy-your-agent">
    Docker, Render, Fly, and Lambda — coming soon.
  </Card>

  <Card title="Use OIDC or bound act-as" href="/tutorials/production/use-oidc-or-bound-act-as">
    Replace sandbox HMAC act-as with an IdP JWT or a bound enrollment identity — coming soon.
  </Card>
</CardGroup>

## Examples

Working examples you can adapt:

<CardGroup cols={2}>
  <Card title="Interactive agent" href="/tutorials/examples/interactive-agent">
    Person in the loop — coming soon.
  </Card>

  <Card title="Noninteractive agent" href="/tutorials/examples/noninteractive-agent">
    Batch or background — coming soon.
  </Card>
</CardGroup>

### Use cases

<CardGroup cols={2}>
  <Card title="Code Execution Agent" href="/tutorials/examples/use-cases/code-agent">
    Governed code execution.
  </Card>

  <Card title="Multi-Adapter Tools Agent" href="/tutorials/examples/use-cases/tools-agent">
    Multiple tool adapters behind one agent.
  </Card>

  <Card title="Knowledge Base Agent" href="/tutorials/examples/use-cases/knowledge-agent">
    Retrieval over a knowledge base.
  </Card>
</CardGroup>