A community tool-barn agent can look up hours but must never email…

Question

A community tool-barn agent can look up hours but must never email a refund or open the door controller. Which control limits those actions?

Accepted Answer

A policy layer on agent actions, such as Policy in Amazon Bedrock AgentCore — not asking the model nicely in the prompt. — Think of a tool-barn agent that can look up hours but must never email a refund or open the door. Put a policy layer on those actions, such as Policy in AgentCore. Asking nicely in the prompt is not a lock.

Answer

Prompt wording only, because a polite sentence is a security boundary.

Answer

Raising temperature so refund emails stop themselves.

Answer

A dashboard title, because charts lock the door controller.

A community tool-barn agent can look up hours but must never email a refund or open the door controller. Which control limits those actions?

Short Explanation

Full Explanation