WEBVTT

1
00:00:00.000 --> 00:00:05.390
This is how Crawdad governs an agent. Not a description of it. The engine itself.

2
00:00:05.390 --> 00:00:11.650
A policy you can read, in plain rules, checked against every single thing an agent tries to do.

3
00:00:11.650 --> 00:00:15.540
Read the source code, that's fine. Read the credentials file, denied.

4
00:00:15.540 --> 00:00:20.260
Wipe a disk? Killed, before it can run.

5
00:00:20.260 --> 00:00:25.380
Four verbs. Allow, ask, deny, kill. Nothing buried. Every rule in the open.

6
00:00:25.380 --> 00:00:30.110
It even guards itself. An agent can't read the rules to learn how to slip past them.

7
00:00:30.110 --> 00:00:34.980
And you can test it. Ask what happens if an agent reaches for your cloud keys.

8
00:00:34.980 --> 00:00:38.340
You get the answer before anything ever runs.

9
00:00:38.340 --> 00:00:45.450
It sees everything your agents do. Which raises a fair question.