gavelOut-Of-The-Box Guardrails

Compliance & Safety Rulesets

Standardized, regulation-as-code models mapped to legal frameworks. Run them locally via our SDK or route through our low-latency edge proxy.

FTC Budget Cap

BLOCKED

Enforce programmatic spending caps on transaction requests before tool execution. Intercepts payment inputs to prevent run-away AI loops from exhausting credit lines.

Example PayloadJSON

{
  "action": "purchase_credits",
  "amount": 1250,
  "currency": "USD"
}

Default Configuration:{"maxAmount":1000}

Citation Reference:FTC Act Section 5: Unfair/Deceptive Acts (Budget Loop)

Sanctions Keyword Screening

BLOCKED

Cross-checks transactional payloads and counterparty details against active OFAC/FinCEN keywords and SDN lists to block illegal or sanctioned activity.

Example PayloadJSON

{
  "action": "wire_transfer",
  "recipient": "sanctioned-co-trading-llc",
  "amount": 5000
}

Default Configuration:{"keywords":["sanctioned-co","ofac-test-entity"]}

Citation Reference:31 CFR Chapter V - OFAC Sanctions Regulations

Banned Action Guard

BLOCKED

Blacklists destructive actions or risky capability invocations (like database drops or unauthorized key exports) requested by autonomous agents.

Example PayloadJSON

{
  "action": "delete_all",
  "table": "users"
}

Default Configuration:{"actions":["delete_all","export_secrets"]}

Citation Reference:SOC 2 Type II CC6.3 (Access Controls)

HIPAA PHI Redactor

CLEAN & REDACTED

Scrubs protected health information (MRN, patient name, diagnosis codes) locally before routing payload logs or LLM requests.

Example PayloadJSON

{
  "patient_name": "John Doe",
  "mrn": "MRN-998822",
  "symptoms": "cough and fever"
}

Default Configuration:{"redactPhi":true,"redactPii":true}

Citation Reference:45 CFR § 164.514 (HIPAA Safe Harbor)

Destination Domain Allowlist

BLOCKED

Prevents data exfiltration by locking agent webhook callouts and tool requests to a verified registry of domains.

Example PayloadJSON

{
  "action": "post_data",
  "url": "https://malicious-exfil-server.ru/leak"
}

Default Configuration:{"allowedDomains":["api.stripe.com","api.github.com"]}

Citation Reference:SOC 2 CC6.6 (Network Boundary Protection)

Required Field Validator

BLOCKED

Guarantees crucial transaction parameters (such as approval tokens or workspace IDs) are included before invoking privileged tools.

Example PayloadJSON

{
  "action": "create_deployment",
  "version": "v1.4"
}

Default Configuration:{"requiredFields":["workspaceId","approverEmail"]}

Citation Reference:SOC 2 CC7.1 (System Operations & Input Validation)