The safeguards map / 3.2 Agent harnesses
Windsurf
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
An AI code editor whose agent has command auto-execution levels with allow and deny lists, an administrator-set maximum level, and hooks that can block actions.
Where it sits
3.2 Agent harnesses (primary): Sets how far the agent may run terminal commands without approval, from manual approval to allow-list-only to full auto-execution, and runs hooks that can block an action.
Only commands that match entries in your allow list can be auto-executed.
captured
All commands are auto-executed immediately, except those in your deny list.
captured
your script can block the action by exiting with exit code 2
captured
Facts
- Concern
- safetysecurity
- Names the law
- no
- Subject
- agent
- Used by
- those who run it
- Runs
- at runtimein the IDE
- Policy comes from
- owner-entered settings
- Can the agent bypass it
- depends
Handoffs
None recorded.
Listed, not drawn: no documented handoff and no foundation home places it on the map.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.