Deterministic Rules
Action limits, target allowlists and denylists, route restrictions, and workspace policy checks run before any semantic model call.
AurelAction limits, target allowlists and denylists, route restrictions, and workspace policy checks run before any semantic model call.
Aurel tracks agent-level frequency and exposure windows to identify abnormal bursts, repeated attempts, and cumulative operational risk.
Aurel evaluates the agent context for prompt injection, social engineering, mission drift, suspicious provenance, and action-reasoning mismatch.
Persisted decisions can carry canonical HMAC-SHA256 signatures so exported audit records can be checked for tampering.