Policy decisions

Policy decisions in plain English

Attempt, gate, outcome — one record per hold.

Readable holds from live-shaped sessions — audit without slowing the fleet.

Examples

Example holds

Four representative sessions — same fields as the command center.

Useful for security review, audit export, and explaining behavior to non-engineers.

POLICY
$45K wire held — payment outside this agent's mandate
Sarah Chen → pay-agent → approve wire transfer
What happened: After untrusted scraped content in-session, pay-agent attempted a $45K external wire.
Why held: Payments sit outside mandate; untrusted data cannot reach payments; approvals incomplete.
Outcome: Policy held before any bank API. Audit record: attempt, gate, no funds moved.
DATA TRUST OUT OF ORDER MANDATE

See also: Security prevention gates

SCOPE
Individual PII blocked — GTM role limited to marketing tiers
sales-gtm-agent → query company memory → john@acme.com
What happened: GTM agent queried company memory for an individual customer's email.
Why held: Role scoped to marketing tiers — not individual PII. Governed before the model.
Outcome: Scope held at retrieval. No PII in context. Same deny model as tool calls.
MEMORY TIER SCOPE

See also: Memory tier controls

GUARDRAIL
Prompt injection blocked — unapproved install never ran
research-agent → read issue → run shell install
What happened: GitHub issue text pushed install from an unapproved source.
Why held: Injection matched; fetch-then-execute forbidden; package not on signed manifest.
Outcome: Guardrail held inline. No shell ran. Session open for SOC review.
INJECTION DATA TRUST TOOL ORDER

See also: Security data-trust gates

POLICY
Cross-agent exfil blocked before external reach
data-agent → agent bus → internet-facing agent
What happened: Data agent routed sensitive content outward via an internet-facing agent.
Why held: Agent bus flagged cross-agent exfil before the message left the fleet.
Outcome: Policy held at the bus. No external publish. Full chain for audit.
CROSS-AGENT BUS MONITOR

See also: Security cross-agent monitoring

These examples use the same prevention gates as Security — data trust, tool order, and cross-agent monitoring.

Overview How prevention gates work