Agent guardrails

Keep AI coding agents scoped before they edit.

Broad tasks can drift into auth, billing, env, database, middleware, and other sensitive areas. Guardrails reduce that risk.

Claude CodeCursorCodex CLIChatGPT

01 / The problem

What goes wrong

  • Unscoped tasks lead agents into files that were not part of the goal.
  • Sensitive systems can be changed accidentally during unrelated work.
  • Post-run review is hard without explicit pre-run boundaries.

02 / Root cause

Why this happens

  • Agents optimize for completion and may expand scope unless constrained.
  • Prompt intent is often broader than the real engineering objective.
  • Teams rely on implicit rules that are not machine-readable.

03 / Without RunTrim

Manual workaround

  1. 1Write a long preface describing files to avoid.
  2. 2Review diffs manually and compare against intent.
  3. 3Block risky changes late in the cycle after tokens were already spent.

04 / With RunTrim

RunTrim workflow

runtrim
local
$runtrim guard "your task"
$runtrim go "your task"
$runtrim watch
$runtrim check

Privacy and trust

  • Source code stays local in V1.
  • No account required for the Free CLI.
  • RunTrim tracks metadata, prompts it generates, changed file paths, and local memory.
  • Cloud sync is Pro early access and metadata-only.

05 / FAQ

Common questions

What are agent guardrails?

Guardrails define allowed scope, protected systems, and verification requirements before an agent starts editing.

Can guardrails prevent every risky change?

No tool can guarantee that. RunTrim reduces risk by making scope explicit and checking changed paths after the run.

Does RunTrim work with Claude, Codex, Cursor, and ChatGPT?

Yes. It works in copy mode with any UI and can wrap configured local CLIs in command mode.

What does RunTrim track during guarded runs?

Run status, generated prompts, changed file paths, protected systems, verification debt, and local memory.

Related resources

Add guardrails before edits

Define scope first, then verify changed paths before shipping agent-generated code.

terminal
$npm install -g runtrim
$runtrim go "your task"

Free in V1 · No account required · Local-first · Agent-agnostic