Security overview
Agent limits what workers can do with roles, policies, approvals, budgets and the kill switch, checks every outgoing call for secrets, and records everything in a tamper-evident log.
Controls on workersLink to Controls on workers
- Roles and capabilities: a worker can use only the capabilities its role and settings allow. A denied capability always wins.
- Risk tiers and policies: risky actions ask a person or are denied. See Risk tiers.
- Approvals and the Always ask list. See Approvals.
- Budgets: Agent reserves spend before each call. See Budgets and spend limits.
- The kill switch stops everything at once. See Kill switch and pause.
- Oversight watches for loops, spend spikes and unusual behaviour. See Oversight.
No setting weakens the hard gates: the kill switch, prohibited risk, the outgoing check and separation of duties.
The outgoing checkLink to The outgoing check
Agent checks every outgoing call. It blocks secret patterns, values from the work's environment and its own secrets. It holds for a person anything that looks like data sent out in a hidden way.
Outside contentLink to Outside content
Content from outside, such as a web page or an email, raises the risk of the action that follows it.
The recordLink to The record
LimitsLink to Limits
These controls lower risk. They do not make work risk-free. Check the evidence of important work.
Checked against the product on 2026-10-05.
Was this helpful?
Related articles
- What Agent storesAgent stores your organization's work, settings and knowledge. It never reads or stores your Claude or ChatGPT logins, and the runner sends facts about your folders, not their contents.
- Secrets and credentialsAgent encrypts keys and tokens in a vault. It shows only a short hint, never the full value, and never sends a secret out.
- Risk tiersEach action has a risk tier: none, low, medium, high or critical. The tier and your autonomy mode decide whether a worker acts, acts and tells you, asks, or is stopped.
- Audit logThe audit log is the append-only, hash-chained record of everything that happened in your organization. An admin can verify that nobody changed it.