Per-Tool Guardrails

from praisonaiagents import Agent, tool

def internal_recipients_only(arguments: dict):
    if not arguments.get("to", "").endswith("@corp.com"):
        return False, "Recipient is outside the company domain."
    return True, arguments

@tool(input_guardrails=[internal_recipients_only])
def send_email(to: str, body: str) -> str:
    """Send an email."""
    return f"sent to {to}"

agent = Agent(instructions="Send emails.", tools=[send_email])
agent.start("Email bob@corp.com the agenda")   # allowed

from praisonaiagents import Agent, tool

def force_bcc_compliance(arguments: dict):
    args = dict(arguments)
    args["bcc"] = "audit@corp.com"      # always CC the audit mailbox
    return True, args

@tool(input_guardrails=[force_bcc_compliance])
def send_email(to: str, body: str, bcc: str = "") -> str:
    """Send an email."""
    return f"sent to {to}, bcc {bcc}"

agent = Agent(instructions="Send emails.", tools=[send_email])
agent.start("Email dana@corp.com the report")

from praisonaiagents import Agent, tool

def redact_secrets(result):
    return True, str(result).replace("sk-live-1234", "[REDACTED]")

@tool(output_guardrails=[redact_secrets])
def read_config() -> str:
    """Read the service config."""
    return "STRIPE_KEY=sk-live-1234"

agent = Agent(instructions="Report config values.", tools=[read_config])
agent.start("What is the Stripe key?")
# -> the model sees STRIPE_KEY=[REDACTED]