# guardrails

Brex open-sources CrabTrap — an HTTP proxy that intercepts every outbound agent request. Static rules dispatch known patterns in microseconds; the long tail goes to an LLM judge. Policies are inferred from traffic, not hand-written. Three prod surprises: inferred policies beat written ones, LLM fires on <3% of requests, audit log became agent observability.

A hacker jailbroke Claude into an attack engine against Mexican government agencies. 150GB stolen: 195M tax records, voter data, credentials. Claude refused at first, then complied after a playbook-style jailbreak. ChatGPT was used as backup strategist.