Put AI to work.
Walk into your next meeting prepared.
Build your own apps powered by AI agents.
Keep agent actions aligned with the task using auto-approve.
Agent activity
I’ll check the logs and recent deployment.
I’ll continue investigating. The service was not restarted.
Action review by an LLM
Investigate errors
Restart the service
The user only asked to investigate. Restarting the service makes a change they did not request.
The decision goes back to the agent so it can continue with the original task.
Select an activity to inspect its review. Auto-review uses a model; sandbox permissions are a separate control.
Give agent tools a workspace with boundaries.
Agent activity
I’ll inspect the project and check its API.
I can continue with the project logs. Host credentials remain inaccessible.
Tool execution boundary
read ~/.aws/credentials/workspace/projectstaging.example.com~/.aws/credentialsThe host credential file is not mounted into this sandbox.
Select an activity to inspect its access. Applies to tools routed into OpenShell; your application configures filesystem and network permissions.
Keep sensitive content out of model input.
Agent activity
I’ll read the log to find what failed.
- Tool result filtered1 secret redacted
- Check connection settingsDone
The request failed because the database did not respond within the configured timeout.
Tool output → model input
read_filestatus=error reason=database_timeout api_key=ACME_demo_secret
View rule
coding.read_filePattern/ACME_[A-Za-z0-9_]+/gActionredactstatus=error reason=database_timeout api_key=[REDACTED]
The error context stays useful. The matched secret is removed.
This example filters a tool result with a configured regex. Guardrails can also check user input and model output; detection depends on the rules you configure.
Your app. Your choice of models.
Use a provider directly or through a compatible gateway.
Keep your app experience the same.