Agentic Interventions Matrix
How do I stop the bleeding now?
Filter
Layers, by what they can actually enforce
- In-agent (empty) — none
An agent acting badly cannot be reliably told to stop. Empty for response. Listed for completeness.
- Client-side cutoffs — fast
Operator-machine actions. Milliseconds to seconds. Effective if the agent is contained to one host.
- Server-side cutoffs — authoritative
Target-system actions. Seconds to minutes. Catches agents and operator hosts that have been compromised.
Showing 3 of 15.
Approval gating at In-agent (empty)
(no enforcement)
Approval gating at Client-side cutoffs
Replace approval hook with deny-all, disable Auto Mode classifier, disable judgment-query escalation channel, force out-of-band on every action.
Approval gating at Server-side cutoffs
Lock branch protection (revoke bypass perms, raise required reviewers), pause CI/CD, engage deployment freeze, lock GitHub environments.