Guardrails

What agent expressions may do. Developers edit these settings, and they apply to every agent.

Compile rules

Each operator is allowed or denied, and an operator can be rewritten to a function of your own from the allowlist. Comprehensions are limited too. The rules apply when a draft is validated or published; a changed rule does not touch a published agent. See Compile rules.

Allowlist

The functions and objects that expressions may use, one per line, and the sys variables that agents may read. The agent server resolves every entry when the allowlist is saved, and refuses the save if an entry cannot be imported. See Allowlist and System variables.

Runtime

Limits on a run: time, loop iterations, database rows, definition size, and LLM spend. See Runtime limits.