Skip to main content
The guardrails node is a first-class node type backed by. It runs synchronously and routes to either a pass or fail output.

​
Available rules

​
How failure routes

When a rule fails, the runner returns success(payload, "fail"). The workflow then takes the fail branch. Crisis-language detection is special: the executor immediately invokes the configured Crisis Response Agent and emits workflow:execution:paused — agent gating cannot proceed.

​
Configuration

Guardrails configuration lives on the deployment (agent_deployments.guardrails_config) and is snapshotted at deploy time — drift between deployed and current draft is detected at the next publish.