this is exactly what tools like @denieddotdev was built for (behavioral auth) some agent behavior should be deterministically blocked by a separate policy layer, not via prompt instructions reach out to @p_valfre for help w this stuff

→ View original post on X — @yoheinakajima,