Guardrails on shaped identifiers
Email addresses, card numbers, IBANs, UK National Insurance and US Social Security numbers and API keys are masked or refused. Names and prose are not found.
Tools fixed when a workflow is saved
A workflow step calls the tool chosen at save. A visitor’s message fills in values and cannot pick another tool.
Tools that change data start off
Only tools that declare themselves read-only switch on by themselves. A person ticks the rest.
Untrusted content is marked
A run that read the open web or an outside tool is marked, so its output is checked first.
An agent or workflow test run records what it would send, and sends nothing.
A second check before acting
A separate model checks an action against your policy. Anything short of a clear approve goes to a person.
A STOP reply puts that person on the opt-out list, which every campaign send checks.
Key budgets, team caps and a balance hold are checked before a call. A widget has a daily cap and a per-visitor limit.
Keys locked to your network
A key can carry a list of addresses, and it is refused from anywhere else.
Every route needs an explicit permission rule. A route without one is refused, and the build fails.
Widget runs keep no visitor text
A widget run stores no visitor words, and the run is deleted after 30 days.
Every routed attempt and every run step is recorded with its cost. Changes to keys, members, teams and agents are logged.
