The guardrail loop

One owner message, three moments

Code checks the facts first. The judge answers only what code cannot prove.

AMessage arrives
Owner

Owner sends a message

text or images

Code checks

Message filter

skips helper and system text

Agent

Agent gets the answers

as notes and saved state

BEvery tool call
Agent

Agent picks a tool

Click a tool type to see its path.

Code checks

Code checks first

command shape, files, task board, steps proven by files

Judge (Jev)

Allow or refuse

refused: fix it and try again

Agent

Tool runs

then the next tool, or the reply

CTurn ends
Agent

Agent replies

the owner sees it now

Code checks

Code reads the task board

tasks ready, board moved, helpers heard from

Judge (Jev)

Block or note

block: the agent keeps working. note: the agent reads it next turn.

Owner

Owner reads and answers

the next message starts the loop again

next tool call

A single token follows one owner message. Click a judge block to read its questions. Click a tool type to follow its path.