Policies

Rules that decide what an agent can do. Checked on every call.

What you can set

Allow or block apps and actions, make a toolset read-only, allow or block deleting, hide output fields, and limit what a write can contain.

Hidden fields are removed before the agent ever sees them.

rule

hris.get_employee  hide: salary, ssn

App and action rules on every plan. Field rules on Indie and Team.