Counter 17 · San Francisco · intaglio specimen
An agent proposes an action. Agentguard checks the policy and evidence behind it before your backend executes.
Refunds issued. Records written. Patients booked. Once an agent commits, you live with what it did. Agentguard makes commit-time the moment of judgment — then gives the agent structured feedback to correct what was unsafe.
update_appointment · John → Friday, 4:30 PMOne unsafe write intercepted. One specific correction. The completed action remains auditable.
I. Controlled evaluations
Enforcement is judged where the tool call meets the record of truth — not in a prompt sandbox. We do not publish another lab’s scores as our own. The plates below are the protocol, not a borrowed leaderboard.
Banking-style traces. Attack success is measured at the tool call, after policy and evidence, not at the chat turn.
The same risky action, run more than once. A single lucky hold is not a receipt. Matched runs are.
Workspace tasks still complete while unsafe writes are intercepted. Safety that forbids all work is not safety.
III. How it ships
Start with the action where a mistake would hurt most. Replay recent traces, author the policy, run alongside production, then promote that route to live enforcement when you trust the decisions.
Inspect proposed actions without touching customers. The plate is still a proof — nothing has been committed.
Turn the requirements for one risky action into a rule the runtime can check: identity, amount, record, evidence.
Agentguard decides beside live behavior. You see the receipts. The backend still executes as it does today.
Live enforcement, with a decision receipt for every intervention. Commit-time is the moment of judgment.
POST /tools/update_appointment
− return backend.execute(payload)
+ receipt = agentguard.commit(payload, policy)
+ if receipt.allow: return backend.execute(payload)
+ return receipt.feedbackIV. Works with
V. Bring one risky workflow
Bring one action that touches money, customers, or your record of truth. We will start in shadow and show the decisions before anything goes live.