Guardrails
What agent expressions may do. Developers edit these settings, and the settings apply to every agent.
Compile rules
Each operator is allowed or denied, and an operator can be rewritten to a function of your own from the allowlist; comprehensions are bounded too. The rules are applied only when a draft is validated or published; a changed rule does not touch a published agent. See Compile rules.


Allowlist
The functions and objects that expressions may use, one per line, and the sys variables that agents may read. The agent server resolves every entry when the allowlist is saved, and refuses the save if an entry cannot be imported. See Allowlist and System variables.


Runtime
Limits on a run: time, loop iterations, database rows, definition size, and LLM spend. See Runtime limits.

