Guardrails
Who may do what
One switch stops every agent. Below: which tools each agent may use, how far it may go, where it may fetch from and which keys are in place.
Kill switch
Stops every agent run and scheduled workflow at once.
Running
Agents may run9 agents and 0 scheduled workflows can start. Nothing is running right now.
Agents allowed
9/9
none blocked
Blocked tool groups
0
+ write files and shell, always
Web fetch
Anydomain
3 agents use the web
Secrets set
0/1
no .env.local yet
Permissions
Agent × tool group. Switch a group off and it leaves the agent’s allowlist on its next start.
| Agent | May run | Read files | Git read | Web fetch/search | Write files | Shell |
|---|---|---|---|---|---|---|
| Growth planGrowth lead | Allowed | Allowed | not used | Blocked | Blocked | |
| Outreach draftsOutreach | Allowed | Allowed | Allowed | Blocked | Blocked | |
| Weekly reportAnalyst | Allowed | Allowed | not used | Blocked | Blocked | |
| Roadmap reviewPlanner | Allowed | Allowed | not used | Blocked | Blocked | |
| SEO checkSEO | Allowed | Allowed | Allowed | Blocked | Blocked | |
| Changelog draftEditor | Allowed | Allowed | not used | Blocked | Blocked | |
| Social ideasSocial | Allowed | Allowed | not used | Blocked | Blocked | |
| Competitor watchResearcher | not used | not used | Allowed | Blocked | Blocked | |
| Ask the projectAssistant | Allowed | Allowed | not used | Blocked | Blocked |
Write files: Always blocked: the runner passes --disallowedTools for every write tool. Results are saved by the app after your approval.Shell: Always blocked: only read-only git commands are allowed; an open shell and PowerShell are disallowed by the runner.A blocked group is removed from the agent’s allowlist on its next start. Nothing here can add a tool the agent does not ask for.
Limits per agent
Turns and cost per run go to the Claude CLI; runs per day are checked before every start.
| Agent | Max turns | Runs today | Max $ / run | Approval | Edit |
|---|---|---|---|---|---|
| Growth plan | 40 | 0 / 10 | $5 | Always | |
| Outreach drafts | 40 | 0 / 2 | $3 | Always | |
| Weekly report | 40 | 0 / 10 | $5 | Always | |
| Roadmap review | 40 | 0 / 10 | $5 | Always | |
| SEO check | 40 | 1 / 10 | $5 | Always | |
| Changelog draft | 40 | 0 / 10 | $5 | Always | |
| Social ideas | 40 | 0 / 10 | $5 | Always | |
| Competitor watch | 40 | 2 / 3 | $5 | Always | |
| Ask the project | 25 | 1 / 10 | $5 | Always |
Defaults: 40 turns · 10 runs/day · $5/run — grey values follow them.
Allowed domains
Where web tools may fetch from.
WebFetch may open any page. Switch to the list to narrow it. Used by Outreach drafts, SEO check, Competitor watch. Web search results are not limited by this list.
- github.com
- x.com
- news.ycombinator.com
- producthunt.com
- reddit.com
Recent changes
Guardrail and budget changes from the audit log.
Monthly agent budget passed 80 % — notify only, runs continueMission Control · 2 h ago
Changed limits of Competitor watchAlina Lorenz · 19 h ago
Changed budget Total · month: $350 → $400, notify → notifyAlina Lorenz · 2 days ago
Added producthunt.comJonas Weber · 2 days ago
Web fetch blocked for Outreach draftsAlina Lorenz · 4 days ago
Resumed agent runs and scheduled workflowsFelix Brandt · 7 days ago
Paused all agent runs and scheduled workflows — rotating the API keyFelix Brandt · 7 days ago
Added budget Growth plan · day · $2, notifyAlina Lorenz · 8 days ago
Secrets
Keys in .env.local — present or missing, never the value.