edictum-oss

Implement YAML-based rules to control AI agent behavior.

29|6|Updated Feb 5, 2026
One-click install
npx skills add https://github.com/edictum-ai/edictum --skill edictum-oss-edictum-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: edictum-oss
Source: https://github.com/edictum-ai/edictum/tree/main/.claude/skills/edictum-oss
Command: npx skills add https://github.com/edictum-ai/edictum --skill edictum-oss-edictum-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enables precise control over AI agent behavior, ensuring that agents adhere to defined rules and boundaries, mitigating risks of unauthorized actions and data breaches.

Core Features & Use Cases

  • Define Tool-Call Boundaries: Specify what tools agents can call and under what conditions.
  • Rule-Based Enforcement: Use YAML-based rules for deterministic decision-making.
  • Production-Grade Security: Fail-closed architecture with zero runtime dependencies.
  • Use Case: Create a rule that prevents an AI agent from reading sensitive files unless authorized by a human.

Quick Start

Set up a rule to block access to sensitive files with the following YAML:

apiVersion: edictum/v1
kind: Ruleset
metadata:
  name: block-sensitive-reads
defaults:
  mode: enforce
rules:
  - id: block-sensitive-reads
    type: pre
    tool: read_file
    when:
      args.path:
        contains_any: [".env", ".secret", "credentials", ".pem", "id_rsa"]
    then:
      action: block
      message: "Sensitive file '{args.path}' blocked."

Frequently Asked Questions about edictum-oss

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I control AI agent behavior and prevent unauthorized tool calls?

Control AI agent behavior by implementing YAML-based rules that define deterministic boundaries. This enforces precise conditions on tool calls, mitigating risks of unauthorized actions and data breaches in production workflows.

How does YAML-based rule enforcement work for AI agents?

YAML-based rule enforcement works by specifying rules that target specific tools and arguments, triggering actions like blocking access. It ensures deterministic decision-making and fail-closed architecture for production-grade security.

Can I block an AI agent from reading sensitive files using rules?

Yes, you can block an AI agent from reading sensitive files by creating a YAML ruleset. Configure a pre-rule to check if file paths contain sensitive keywords and apply a block action to prevent unauthorized access.

Do I need the Edictum runtime to enforce AI agent boundaries?

Yes, you need the Edictum runtime and server for full functionality. The architecture operates fail-closed with zero runtime dependencies, ensuring production-grade security and deterministic boundary enforcement.

What's the best way to define tool-call boundaries for production AI workflows?

The best way to define tool-call boundaries is using YAML-based rulesets with a fail-closed mode. This approach specifies exact tools and conditions, ensuring deterministic decision-making and mitigating risks in production AI workflows.

Are there limitations to using YAML rules for AI agent control?

YAML rules provide deterministic, rule-based enforcement rather than dynamic contextual judgment. This means boundaries are strict and predefined, requiring explicit rule configuration for every condition an AI agent might encounter.