A Policy Kernel, Not a Prompt

Garu’s policy kernel restricts an always‑on agent by hiding disallowed tools and requiring user approval for unmatched calls, enabling safe unattended operation