Enforce-mode tool policies: blocking agent install commands before execution
HowDevelop · x · 2026-10-04
A follow-up on constraining coding agents: when an agent runs npm install bad-package, that's a supply-chain decision inside an autonomous workflow. Agent Guard's ToolPolicy with CEL rules in Enforce mode blocks the command before execution. Key caveat: match all wrapper forms like python -m pip and uv pip to avoid bypasses.
More from coding & agent
- Dev ships one-day game demo Dark Veil: custom Rust + wGPU engine, procedural assets — Dimillian · 2026-10-05
- Agents Take Over the Full Ticket Lifecycle: From PRD to Fixing CI/CD, With Embedded Governance — Pavan_Belagatti · 2026-10-05
- TAHI: Test-Time Adaptive Agents That Fit Individual Experts in Tens of Tasks — AkariAsai · 2026-10-05
- JEV-27B decision-making demo space trends on Hugging Face — autotrust · 2026-10-05
- JEV-9B decision demo with MCP server trends on Hugging Face — autotrust · 2026-10-05
- Claude Code skill forces three design directions and self-critique to kill AI-slop UIs — PrajwalTomar_ · 2026-10-05