No network egress
Refuses any tool call that hits the network. For air-gapped reviewers, untrusted-input handlers, supply-chain auditors.
id policy/no-network-egressv1.0.0by convergent-systems-key
Rule
Do not make HTTP / HTTPS requests. Do not resolve hostnames. Do not invoke tools whose side_effects include 'network'. If a task requires network, escalate to a supervisor with the explicit request.
- Boundary type
role-refusal- Refuses
- Do not make HTTP / HTTPS requests.
- Do not resolve hostnames.
- Do not invoke tools whose side_effects include 'network'.
- If a task requires network, escalate to a supervisor with the explicit request.
- Escalates to
agent-atoms://atoms/persona/devops-engineer
Used by
- agent/code-reviewer — Code Reviewer
- agent/safe-by-default — Safe-by-Default Agent Template
Author convergent-systems-key. Source convergent-systems-co/agent-atoms (original ↗). License Apache-2.0. Re-typed from role-boundary by scripts/migrate-policy-tool.py.