Quarantine an agent session the moment it violates policy

Enforcement gains teeth. Risk policies can now freeze an entire agent session on violation until an org admin releases it, and MCP tool-call killswitches are enforced on every path, including private remote and tunneled servers, with a management API and a dashboard rolling out for creating and lifting them.

Features

• Quarantine an agent session on violation #5561 - Risk policies gain a quarantine action: a violation denies the triggering event and freezes the whole agent session, with prompts and tool calls refused by a message naming the policy, until an org admin releases it from the new Quarantines tab. Opens and releases are audit-logged. (Author: @vishalg0wda)
• Killswitches enforced on every tool-call path #5839 - Active MCP tool-call killswitches now stop calls before they reach private remote and tunneled servers, not just hosted ones. A management API lets org admins create, edit, and lift killswitches with schedules, server scope, overlap previews, and history (#5855), and a Killswitch dashboard with principal-first workflows is rolling out to a limited cohort of organizations (#5863). (Author: @danielkov)

Bug fixes

• Guardrail policies only offer supported detections #5862 - The policy editor no longer lists detection types the engine cannot actually enforce. (Author: @vishalg0wda)