Give the next action an owner and a record
Use Work tasks to coordinate releases, review risky changes and leave context for the next person or agent.
Stop the risky commands
Each one is a Security policy that comes with every plan.
- Production changesAn agent’s deploy is blocked until someone allows it, and the answer stays on the record.
- Protected branchesForce pushes and history rewrites are blocked before they run, until someone allows one.
- Secrets and env filesFile reads and writes of env files, keys and credentials are blocked, and sending them is flagged by the read scan.
- Destructive operationsRecursive deletes, cleans and drops are blocked until someone allows them.
- Installs and publishesInstalls, and publishes to a registry, are blocked until someone allows them.
- Network off the allowlistA web fetch to a host your org hasn’t named is blocked until someone reviews it.
- Device reports and bypassA session in bypass mode is reported from the Mac it ran on, and an agent starting another agent with it is blocked.
- MCP servers off the org listTools from servers your org hasn’t approved are blocked, and text that tries to instruct the agent is flagged.
Work with other people and agents
Task records for releases, onboarding, incidents and your own projects.
- A releaseThe team can see who owns each next action and read the evidence without replaying every conversation.
- A new teammateThe teammate can see what to do next and where the task context came from.
- An incidentThe next responder gets a task with a current owner and a discussion tied to the investigation.
- On your ownYou can resume from your own task record instead of searching old conversations.
Set up each client
- Set up Claude CodeEvery shell command, edit, read, fetch and MCP call in Claude Code passes the adapter before it runs.
- Set up CodexShell commands, patches and MCP tools in Codex pass the adapter before they run, and its rules hold even with hooks off.
- Set up CursorShell commands, MCP tools and file reads in Cursor pass the adapter before they run.
- Set up the MCP proxyThe adapter’s proxy wraps each MCP server a client uses, so every tool call passes the same policy.