Quarantine & step-down.
Step a breaching agent down to read-only instead of killing it outright.
// policy
trigger → role = read-only + flag(review)
A full kill can take down work that was fine alongside the part that wasn't. Sometimes the right move is to shrink the blast radius, not pull the plug.
When an agent breaches, drop it into a minimal read-only mode rather than cutting it off entirely, so it can keep doing harmless work while you investigate.
Intercept
The agent attempts an action. HiveKey catches it in the path — nothing reaches the tool yet.
Evaluate
On a trigger, HiveKey swaps the agent's role for a minimal read-only one in the path and flags it for review, with the step-down recorded in the log.
Enforce & log
The verdict is enforced — allow, block, or route for approval — and written to the audit trail, attributable to the agent's owner.
Agent
attempts an action
HiveKey
scope · guard · log
Tool / MCP
only allowed actions
Built for security and platform teams.
Contain a breach without the collateral of a full kill
Drop the agent to a minimal, read-only role
Flag it for review while harmless work continues
Quarantine & step-down is one expression of Guard.
Every capability rides the same spine — Scope what an agent can do, Guard each action in the path, Log all of it on one trail.
Enforce every action your agents take.
Scope, guard, and log every action — and enforce it in the path, before anything happens.