From god-mode to governed: an AI agent that can’t exceed its grant

Automated excerpt

It never embeds the agent or decides how it thinks. The agent is a separate program (a small LangChain agent in the repo). agenthof calls it over a socket and drives it through doors: model, tool, exec, spawn. The agent held only its run token; it never saw a secret.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.