1
00:00:00,180 --> 00:00:04,880
I feel like expressing all the things that you want the agent not to do is very, very

2
00:00:04,880 --> 00:00:10,500
hard. You can express all the things that you want the agent not to do. That deny listing

3
00:00:10,500 --> 00:00:16,340
problem is a well -known one in security and is basically not great. You could express

4
00:00:16,340 --> 00:00:20,040
all the things you want the agent to do, but you're exactly right that if you're using

5
00:00:20,040 --> 00:00:24,140
something like OpenClaw, that set of things might be so big that you couldn't reasonably

6
00:00:24,140 --> 00:00:25,460
express all of them.

7
00:00:27,440 --> 00:00:33,340
Generally, I would say that those are exception cases. Even if I'm using something like

8
00:00:33,340 --> 00:00:39,020
Claude Code on my desktop, I don't want it to do such a broad range of things. I might

9
00:00:39,020 --> 00:00:43,420
want it to be able to do pretty much arbitrary stuff within a particular git repo, for

10
00:00:43,420 --> 00:00:49,540
example, and nothing beyond that. You can express those kinds of policies. But fundamentally,

11
00:00:49,720 --> 00:00:54,840
if you're going to put an agent in a deterministic box, you have to know what the shape

12
00:00:54,840 --> 00:00:59,340
of that box is. If the shape of that box is, well, just allow it to do everything,

13
00:01:04,680 --> 00:01:08,320
then the policy is not going to help you that much. If it's allow it to do everything

14
00:01:08,320 --> 00:01:13,840
except these things, that might be useful. But I will say that what we've seen and you

15
00:01:13,840 --> 00:01:15,500
might have seen this in a lot of the headlines,

16
00:01:16,800 --> 00:01:22,120
if you say to an agent, you're allowed to not do anything but this, it tends to find

17
00:01:22,120 --> 00:01:25,360
ways around the obstacle very, I would say, creatively.

18
00:01:26,420 --> 00:01:32,060
I do tend to mentally think about most people should be thinking about this as an allow

19
00:01:32,060 --> 00:01:37,480
listing problem of allow listing a set of allowed behaviors rather than a deny listing

20
00:01:37,480 --> 00:01:40,580
problem of trying to exhaustively list all of the bad things in the world.