Outline sketch
Audience: agent harness authors.
Steps:
1) Capture proposed tool + args summary + utterance + rules.
2) Parallel Nouls — one per hazard (destructiveness, exfil, scope_creep, injection_in_tool_result).
3) Code: per-hazard thresholds → allow / ask user / block.
Expected effect: stronger screening than one vague danger question (author-reported in community firewall studies).
Do not execute tools from inside the model.
Needs access to: typesafe-sdkagent-runtime
Who it's for
Agent harness authors
Steps / how it's set up
Insert a pre-execution gate. Sources: llm_guardrails cookbook · typesafe-ai-firewall · pi-warden · pi-jev. Measured claims (paired runs / hard-negative rates) are author-reported.
Prefer one Noul per hazard (exfil, irreversible, jailbreak, …) with per-threshold tables in code rather than one vague “is this safe?” question. Multi-hazard firewalls are author-reported improvements over single checks.
Sources (wave-2 deepen)
Expected effect
Guardrails are cheap relative to the tool call they protect; probabilities beat essays.
Unofficial outline for learning. Paraphrased from public docs and tutorials — not a production recipe. Review sources before you automate anything.