WEBVTT 00:00:00.030 --> 00:00:04.030 position:50% align:center size:88% Let us review spending limits, approvals, and change policy. 00:00:04.105 --> 00:00:07.134 position:50% align:center size:88% This is a read-only tour of the current Demo workspace. 00:00:07.614 --> 00:00:11.114 position:50% align:center size:88% Start with the always-on protections at the top of Guardrails. 00:00:11.189 --> 00:00:16.139 position:50% align:center size:88% Investigation tools refuse mutating or unknown estate operations. 00:00:16.214 --> 00:00:21.714 position:50% align:center size:88% Changes use a separate validated plan, eligible connection, and exact approval. 00:00:21.814 --> 00:00:25.264 position:50% align:center size:88% Broader cloud permissions do not remove these boundaries. 00:00:25.364 --> 00:00:29.549 position:50% align:center size:88% Estate scans stay read-only, and captured data is scrubbed. 00:00:29.624 --> 00:00:32.638 position:50% align:center size:88% These protections apply before the workspace settings below. 00:00:34.640 --> 00:00:37.290 position:50% align:center size:88% Scroll to AI budgets and kill switch. 00:00:37.390 --> 00:00:41.015 position:50% align:center size:88% Daily and monthly limits stop new runs across this workspace. 00:00:41.065 --> 00:00:44.115 position:50% align:center size:88% The per-incident limit covers all runs for one incident. 00:00:44.190 --> 00:00:48.215 position:50% align:center size:88% All three limits currently show zero, which turns these ceilings off. 00:00:48.315 --> 00:00:50.715 position:50% align:center size:88% Spending remains visible below the fields. 00:00:50.790 --> 00:00:55.665 position:50% align:center size:88% Pause all agents stops new agent work; incoming alerts keep recording. 00:00:55.715 --> 00:00:58.815 position:50% align:center size:88% We locate the pause button and leave it untouched. 00:00:58.890 --> 00:01:02.587 position:50% align:center size:88% Cancelling an individual running investigation is a separate action. 00:01:04.440 --> 00:01:06.990 position:50% align:center size:88% Continue down to Extra approval gates. 00:01:07.065 --> 00:01:10.215 position:50% align:center size:88% These add human gates on top of the built-in write floor. 00:01:10.290 --> 00:01:13.915 position:50% align:center size:88% This workspace currently uses the write floor only for each pillar. 00:01:13.990 --> 00:01:17.215 position:50% align:center size:88% Now continue to Cost cap and PII patterns. 00:01:17.265 --> 00:01:20.640 position:50% align:center size:88% The separate investigation cap is currently two dollars. 00:01:20.690 --> 00:01:25.290 position:50% align:center size:88% The help text says a blank or zero value inherits the platform default. 00:01:25.390 --> 00:01:29.115 position:50% align:center size:88% At seventy percent, routing can step down one model tier. 00:01:29.190 --> 00:01:33.283 position:50% align:center size:88% At the cap, the agent wraps up; estate scans have their own budget. 00:01:35.040 --> 00:01:37.315 position:50% align:center size:88% Continue to the automatic work controls. 00:01:37.390 --> 00:01:40.065 position:50% align:center size:88% Pre-approved route auto-fix is currently off. 00:01:40.115 --> 00:01:44.490 position:50% align:center size:88% When enabled, an eligible route may open its GitOps pull request. 00:01:44.540 --> 00:01:47.215 position:50% align:center size:88% The request still waits for a person to merge it. 00:01:47.290 --> 00:01:52.615 position:50% align:center size:88% P1 and P2 finding analysis follows the enabled platform default here. 00:01:52.690 --> 00:01:55.740 position:50% align:center size:88% Backlog catch-up follows the disabled default. 00:01:55.815 --> 00:02:00.715 position:50% align:center size:88% These are paid agent runs, so set a daily limit before a large first sync. 00:02:00.815 --> 00:02:02.944 position:50% align:center size:88% No switch is changed during this review. 00:02:04.920 --> 00:02:08.695 position:50% align:center size:88% Scroll to Pre-approved operations and the Change class policy. 00:02:08.745 --> 00:02:10.720 position:50% align:center size:88% The current policy is Derived. 00:02:10.795 --> 00:02:15.345 position:50% align:center size:88% P1 or critical incidents are emergency changes at level three. 00:02:15.420 --> 00:02:18.945 position:50% align:center size:88% A matched runbook can qualify for standard classification. 00:02:19.020 --> 00:02:22.720 position:50% align:center size:88% Every planned write must also be in the selected operation list. 00:02:22.795 --> 00:02:25.620 position:50% align:center size:88% Otherwise, the derived class is normal. 00:02:25.720 --> 00:02:30.645 position:50% align:center size:88% Standard classification does not make execution automatic or lower its tier. 00:02:30.745 --> 00:02:35.555 position:50% align:center size:88% Live infrastructure, production, and blast radius can require a higher tier. 00:02:37.440 --> 00:02:41.565 position:50% align:center size:88% The operation list shows the exact actions this policy can recognize. 00:02:41.665 --> 00:02:44.665 position:50% align:center size:88% No operation is selected in this Demo workspace. 00:02:44.765 --> 00:02:48.290 position:50% align:center size:88% Scroll through the available actions without changing a checkbox. 00:02:48.365 --> 00:02:53.065 position:50% align:center size:88% Repository edits create pull requests; merging and deploying stay with people. 00:02:55.465 --> 00:02:58.640 position:50% align:center size:88% First, close the settings group and scroll the sidebar. 00:02:58.715 --> 00:03:02.815 position:50% align:center size:88% Open Documentation, then choose the Agents and guardrails guide. 00:03:02.915 --> 00:03:06.715 position:50% align:center size:88% Expand Guardrails and scroll down to its pricing caveat. 00:03:06.815 --> 00:03:09.640 position:50% align:center size:88% Unpriced tokens may show zero spend. 00:03:09.715 --> 00:03:12.849 position:50% align:center size:88% Confirm token pricing before relying on a spending cap.