Guardrails

What agent expressions may do. Developers edit these settings, and the settings apply to every agent.

Compile rules

Each operator is allowed or denied, and an operator can be rewritten to a function of your own from the allowlist; comprehensions are bounded too. The rules are applied only when a draft is validated or published; a changed rule does not touch a published agent. See Compile rules.

The Compile rules page: expression limits and per-operator allow/denyThe Compile rules page: expression limits and per-operator allow/deny
Compile rules: limits on expressions, and allow, deny or rewrite per operator.

Allowlist

The functions and objects that expressions may use, one per line, and the sys variables that agents may read. The agent server resolves every entry when the allowlist is saved, and refuses the save if an entry cannot be imported. See Allowlist and System variables.

The Allowlist page: the sys variables and functions expressions may useThe Allowlist page: the sys variables and functions expressions may use
The allowlist: the system variables, and the functions and objects that expressions may call.

Runtime

Limits on a run: time, loop iterations, database rows, definition size, and LLM spend. See Runtime limits.