What an Agent May Do

Check the actions your AI agent proposes against your own domain rules before any of them execute. Four constructs — functional, disjoint, range, one_of — return ADMISSIBLE / REVIEW / INADMISSIBLE per action and a batch verdict, with no admissibility score because a contradiction cannot be scored. Deterministic, offline Python engine + reproducing workbook; grades proposed actions, never people.

Grade whether an agent action is safe to run unattended, on two axes it prints separately: reversibility (can you undo it in time) and blast radius (how many records one call touches). Returns RUN UNATTENDED / RUN WITH APPROVAL / DO NOT AUTOMATE, and a typical count is never treated as a bound. Deterministic engine + workbook; grades the actions you describe, never people.

Grade whether every tool your AI agent can call has an input contract that could actually refuse a bad call. Each parameter reads TYPED / LOOSE / OPEN DOOR from its kind and its consequence — money needs a ceiling AND a cross-field rule, so a $10,000 cap that can't stop a $9,999 refund on a $12 order still reads OPEN DOOR. Deterministic engine + workbook; grades contracts, never people.

Before you flip an AI agent live, score its guardrails. Five operational controls — approval gate, logging, rollback, bounded scope, escalation — one verdict: READY / FIX / DO NOT DEPLOY. A destructive action with no human approval is a hard stop, no matter how high the rest scores. Deterministic, offline, runnable.