Important Guardian Agents and Agent Contracts are available in private preview. The screens, terminology, and behavior described in this section are based on pre-release designs and are subject to change before general availability.
As AI agents move into production, they can access sensitive data, call tools, and take actions autonomously, often faster than deployment-time policies or periodic reviews can keep up with. Guardian Agents extend control into runtime by continuously monitoring agent behavior against the rules set in an Agent Contract, and responding when an agent moves outside its established boundaries, from flagging and escalating an issue to redirecting or blocking the action.
- Agent Contract
- A governed, versioned asset that defines, in natural language, what an AI agent is allowed to do, what data it can access, and what outcomes it is responsible for. A Contract turns informal expectations about agent behavior into a reviewable, auditable set of rules.
- Guardian Agent
- A runtime system that monitors an AI agent's actions against its Contract, and intervenes, by denying, escalating, flagging, or rewriting an action, when that action violates the Contract. Guardian lets you investigate and adjust the behavior of a single flagged agent without halting all other operations, containing risk while keeping the rest of your AI landscape running.
A Contract can exist on its own, as a record of intended agent behavior. Guardian is what turns that record into active, real-time enforcement: without a Contract, there is nothing for Guardian to enforce; without Guardian enabled, a Contract is descriptive only and not enforced at runtime.
- Enable Guardian Agents and Agent Contracts.
- Learn more about the Agent Contract model.
- Learn more about Guardian Agent runtime enforcement.