<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Safety on Go Micro</title><link>https://go-micro.dev/tags/safety.html</link><description>Recent content in Safety on Go Micro</description><generator>Hugo</generator><language>en</language><lastBuildDate>Wed, 29 Jul 2026 08:42:34 +0100</lastBuildDate><atom:link href="https://go-micro.dev/tags/safety/index.xml" rel="self" type="application/rss+xml"/><item><title>Agent Guardrails</title><link>https://go-micro.dev/blog/2026/06/16/agent-guardrails.html</link><pubDate>Tue, 16 Jun 2026 00:00:00 +0000</pubDate><guid>https://go-micro.dev/blog/2026/06/16/agent-guardrails.html</guid><description>&lt;p&gt;The interesting failures of an autonomous agent aren&amp;rsquo;t dramatic. It calls the same tool with the same arguments over and over, making no progress. It takes thirty steps on a task that needed three, quietly running up cost. It performs an action that a human, or a policy, should have stood in front of. When an agent &lt;a href="https://go-micro.dev/blog/2026/06/15/when-the-event-is-the-prompt/"&gt;runs on its own&lt;/a&gt;, there&amp;rsquo;s no one watching to catch any of it.&lt;/p&gt;
&lt;p&gt;A useful way to think about this — which came up in a community discussion recently — is to separate &lt;strong&gt;orchestration&lt;/strong&gt; from &lt;strong&gt;execution safety&lt;/strong&gt;. The model decides what to do; that&amp;rsquo;s orchestration. Whether a decided action is actually allowed to run is a separate concern, and it shouldn&amp;rsquo;t be tangled into the model or the services. Go Micro keeps them apart: every tool call an agent makes passes through one choke point, and that&amp;rsquo;s where the guardrails live. They apply uniformly to service calls, custom tools, and &lt;code&gt;delegate&lt;/code&gt;, and they touch neither the model nor your services.&lt;/p&gt;</description></item></channel></rss>