Policies are defined in YAML and control what agents can do. Key policy fields:
- allowed_actions: list of permitted operations (e.g.,
gmail.messages.list,slack.messages.send) - rate_limits: maximum requests per minute, hour, or day per agent
- tokenisation_rules: which data fields to tokenise and what classifiers to apply (email, phone, PII, financial)
- approval_required: actions that require human approval before execution
- scope_restrictions: limit agents to specific resources, folders, channels, or data sets
Create and edit policies from the Policies page. Changes take effect immediately for all agents using the policy.