Tag
controls
7 entries, including 3 patterns.
There is no single AI kill switch
Incident response needs independent controls over authority, connectivity and execution.
- Pattern
Three-Pillar Agent Containment
Pre-engineer independent response controls over an agent's authority, connectivity and execution.
- Pattern
External Agent Policy Enforcement
Keep authoritative policy outside the agent's control and require its decision at every consequential service boundary.
The agent edited its own policy
A repository policy file can guide an AI coding agent. It cannot constrain the agent when the same identity can rewrite or bypass it.
A block rate is not a security outcome
Measure whether a guardrail prevented the unwanted action, whether responders saw it, and whether the same control broke legitimate work.
- Pattern
Outcome-Based Guardrail Assurance
Test prevention, detection and response against observable actions in a controlled environment.
Deny has to mean deny
Framework callbacks observe. A governance contract has to stop the action, even if the guard crashes.