Skip to main content
Guardrail administration spans two SDK namespaces: client.settings owns tenant policy, while client.agents.guardrails owns assignment to a specific agent.

Read the tenant catalog

The three stable IDs are pii_detection, adherence_detection, and roost_open_safety. Each setting includes its current and default policy, replacement message, model, enabled state, cadence, and catalog availability.

Update tenant policy

Updates replace all four mutable fields. Read the current setting first when changing only one value.
Control whether a guardrail can be newly assigned from the agent catalog:

Assign guardrails to an agent

Assignment writes and every tenant policy write require tenant-admin permission. Assign is idempotent. Detach returns 404 when the guardrail is not assigned.