Agentic AI › Limits & Oversight
Guardrails
The limits that are not the agent's own. Checked before every tool call and again against what it would move. A new deployment with agents and no limits is one bad prompt away from a thousand purchase orders.
Where to find it
- Module: Agentic AI
- Group: Authority
- Section: Limits & Oversight
- Screen: Guardrails
Address in the console: /agentic/guardrails
List · 14 columns · 21 fields on its form · 5 of them required
What the list shows
These are the columns of the list, in the order they are drawn. Any of them can be sorted on, filtered on, hidden, or exported.
| Column | Kind | Field name |
|---|---|---|
| Code | Code | code |
| Name | Text | name |
| Rule | Status | rule_kind |
| Applies to | Status | scope_kind |
| Agent | Text | agent_name |
| Workflow | Text | workflow_name |
| Amount | Amount | limit_amount |
| Count | Number | limit_count |
| Per | Status | limit_window |
| When broken | Status | on_breach |
| Severity | Status | severity |
| Breaches | Number | breach_count |
| Last breach | Date and time | last_breach_at |
| Active | Yes or no | is_active |
The form
What is asked for when a record is created here. Required fields are marked; a choice drawn from a configuration list is one an administrator can extend without a release.
| Field | Type | Choices | Notes |
|---|---|---|---|
| Code required | Text | ||
| Name required | Text | ||
| Local name | Text | ||
| What it is for | Long text | ||
| Applies to required | Choice | org, module, agent, workflow, tool, connection | What it covers: the whole company (org), one module, or one agent, workflow, tool or connection — named below. |
| Agent | Choice | Looked up from existing records | |
| Workflow | Choice | Looked up from existing records | |
| Tool | Choice | Looked up from existing records | |
| Connection | Choice | Looked up from existing records | |
| Module | Text | For Applies to module: which one, e.g. scm. | |
| Rule required | Choice | Configuration list | What is checked: an amount, a count, an expression, or a list of allowed or refused values. |
| Amount limit | Number | In the company currency: the most that may be moved or spent in each Per window. | |
| Count limit | Number | The most calls or records in each Per window. | |
| Per | Choice | run, hour, day, week, month | The window the limit is counted over. |
| Fires when | Long text | For an expression rule: the condition that breaks it, e.g. amount > 50000 and supplier.is_new. | |
| Only these | Text | Comma separated. | |
| Never these | Text | Comma separated values that are always refused. | |
| When broken required | Choice | Configuration list | What happens: refuse the call, ask a person, stop the run, or only record it. |
| Severity | Choice | low, medium, high, critical | How serious the incident raised on a breach is. |
| What to say | Long text | Read by the person who has to act on it, and by the model, which will try something else if it is told why. | |
| Active | Yes or no |
The rules that apply here
Everything on this screen obeys the platform rules rather than rules of its own. The ones worth knowing before you use it:
- Narrowing a list — search, conditions, sort, totals, export and saved views.
- What may be changed — the five grounds a record may not be edited on.
- Companies and business units — what the switcher above this list is doing to it.
- Creating a record — required fields, where choices come from, and how the number is allocated.
- Importing a spreadsheet — this screen accepts one, and it runs through the same rules as typing.