Template Library
30 pre-built guardrail templates. Apply when issuing a passport or configuring a gate, or both.
Apply to a Passport
Embed guardrails directly in the agent's credential at issuance. The constraints travel with the passport, enforced everywhere it's used, even without a gate.
Dashboard → Passports → Issue Passport → Choose Template
Apply to a Gate
Set default guardrails on a gate checkpoint. Every agent that passes through is subject to these rules, regardless of what their passport says.
Dashboard → Gates → Create Gate → Choose Template
You can use both at once. A passport can carry its own constraints and a gate can add its own on top. The enforcement layer (Modei's policy evaluator) applies both and returns the most restrictive result.
Templates are pre-configured guardrail packages. Pick the one that matches your agent's purpose, review the constraints, and apply. You can customize any value after applying.
Personal Productivity Templates
Personal Email Agent
Read and send emails on your behalf. Rate-limited to prevent spam.
Use case: Gmail/Outlook automation, inbox zero, auto-reply to routine messages.
{
"template_id": "personal-email-agent",
"trust_tier": "L1",
"permissions": ["email:read", "email:send", "email:draft"],
"guardrails": {
"rate_limits": { "sends_per_hour": 10, "sends_per_day": 50 },
"spend_limits": { "daily_usd": 0 },
"content_controls": {
"require_approval_new_contacts": true,
"log_pii": true
}
}
}Calendar Manager
Create events, send invites, reschedule meetings, and block focus time.
Use case: Scheduling automation, meeting coordination, focus-time protection.
{
"template_id": "calendar-manager",
"trust_tier": "L1",
"permissions": ["calendar:read", "calendar:write", "calendar:invite"],
"guardrails": {
"rate_limits": { "events_created_per_day": 20, "external_invites_per_day": 10 },
"operational_limits": {
"max_event_duration_hours": 8,
"look_ahead_days": 90,
"allow_delete": false
},
"spend_limits": { "daily_usd": 0 }
}
}File Organizer
Move, rename, and tag files. Scoped to specified directories. Never deletes.
Use case: Downloads folder cleanup, project file organization, photo sorting.
{
"template_id": "file-organizer",
"trust_tier": "L1",
"permissions": ["files:read", "files:write", "files:move"],
"guardrails": {
"scope_controls": {
"allowed_directories": ["$HOME/Downloads", "$HOME/Documents"],
"allow_delete": false,
"allow_system_files": false
},
"rate_limits": { "operations_per_day": 500 },
"spend_limits": { "daily_usd": 0 }
}
}Note-Taking Agent
Captures, organizes, and retrieves notes. Can transcribe meetings.
Use case: Meeting summarization, voice-to-note, knowledge base building.
{
"template_id": "note-taking-agent",
"trust_tier": "L1",
"permissions": ["notes:read", "notes:write", "audio:transcribe"],
"guardrails": {
"rate_limits": { "notes_per_day": 100 },
"spend_limits": { "daily_usd": 2.00, "monthly_usd": 40.00 },
"network": {
"allowed_destinations": ["api.openai.com", "api.notion.com"]
}
}
}Task Manager
Creates, assigns, and tracks tasks across project management tools.
Use case: GTD automation, project tracking, deadline management.
{
"template_id": "task-manager",
"trust_tier": "L1",
"permissions": ["tasks:read", "tasks:write", "tasks:assign"],
"guardrails": {
"rate_limits": { "tasks_per_day": 200 },
"operational_controls": {
"allow_delete": false,
"allow_priority_override": false,
"require_approval_for_assignment": true
},
"spend_limits": { "daily_usd": 0 }
}
}Personal Shopper
Researches products and makes purchases up to defined limits on approved merchants.
Use case: Price monitoring, grocery reordering, gift buying.
{
"template_id": "personal-shopper",
"trust_tier": "L2",
"permissions": ["web:search", "commerce:purchase", "commerce:cart"],
"guardrails": {
"spend_limits": {
"daily_usd": 50.00,
"monthly_usd": 200.00,
"per_transaction_usd": 25.00,
"require_approval_above_usd": 20.00
},
"merchant_controls": {
"approved_merchants": ["amazon.com", "target.com"],
"require_approval_new_merchants": true,
"allow_recurring": true
}
}
}Business Operations Templates
Customer Support Agent
Handles tier-1 support, answers questions, looks up orders, issues refunds up to $50.
Use case: E-commerce support, SaaS helpdesk, returns processing.
{
"template_id": "customer-support-agent",
"trust_tier": "L2",
"permissions": ["support:read", "support:respond", "orders:read", "refunds:issue"],
"guardrails": {
"spend_limits": {
"per_ticket_usd": 50.00,
"daily_usd": 500.00,
"escalate_above_usd": 50.00
},
"rate_limits": { "tickets_per_hour": 100 },
"content_controls": {
"mask_pii_in_logs": true,
"allow_account_modifications": false
}
}
}Sales Development Agent
Researches prospects and sends personalized outreach. Cannot close deals or commit to pricing.
Use case: SDR automation, LinkedIn research, cold outreach personalization.
{
"template_id": "sales-development-agent",
"trust_tier": "L2",
"permissions": ["web:search", "crm:read", "crm:write", "email:send"],
"guardrails": {
"rate_limits": {
"emails_per_day": 100,
"max_followups_per_prospect": 3
},
"operational_controls": {
"allow_pricing_commitments": false,
"allow_crm_delete": false,
"honor_optout_immediately": true
},
"spend_limits": { "daily_usd": 10.00 }
}
}HR Onboarding Agent
Guides new hires through onboarding, provisions accounts, assigns training, sends welcome comms.
Use case: New hire workflow automation, IT provisioning, training assignment.
{
"template_id": "hr-onboarding-agent",
"trust_tier": "L2",
"permissions": ["hr:onboarding", "accounts:provision", "training:assign", "email:send"],
"guardrails": {
"data_controls": {
"allow_salary_data": false,
"allow_employee_record_modification": false,
"gdpr_mode": true
},
"operational_controls": {
"allowed_systems_for_provisioning": ["gsuite", "slack", "jira", "github"]
},
"spend_limits": { "daily_usd": 0 }
}
}Contract Review Agent
Reviews contracts for risky terms, summarizes obligations. Read-only, cannot sign or modify.
Use case: Legal intake automation, contract risk scoring, NDA review.
{
"template_id": "contract-review-agent",
"trust_tier": "L2",
"permissions": ["documents:read", "analysis:run", "reports:write"],
"guardrails": {
"operational_controls": {
"allow_signing": false,
"allow_document_modification": false,
"allow_external_transmission": false
},
"spend_limits": { "daily_usd": 5.00 }
}
}Expense Report Agent
Processes receipts, categorizes spend, submits reports for approval. Cannot approve its own expenses.
Use case: AP automation, receipt scanning, policy compliance checking.
{
"template_id": "expense-report-agent",
"trust_tier": "L2",
"permissions": ["expenses:read", "expenses:create", "expenses:submit"],
"guardrails": {
"operational_controls": {
"allow_expense_approval": false,
"require_receipt_above_usd": 25.00,
"flag_for_review_above_usd": 500.00
},
"spend_limits": { "daily_usd": 0 }
}
}Meeting Scheduler
Schedules across multiple calendars, books rooms, manages reschedules.
Use case: Executive assistant automation, interview scheduling, all-hands coordination.
{
"template_id": "meeting-scheduler",
"trust_tier": "L2",
"permissions": ["calendar:read", "calendar:write", "calendar:invite", "rooms:book"],
"guardrails": {
"rate_limits": {
"external_invites_per_day": 50,
"room_bookings_per_day": 10
},
"operational_controls": {
"require_approval_cancel_within_hours": 24
},
"spend_limits": { "daily_usd": 0 }
}
}Developer Tools Templates
Code Review Agent
Reviews PRs, checks for bugs and security issues. Cannot merge, approve, or push code.
Use case: Automated PR review, style guide enforcement, security linting.
{
"template_id": "code-review-agent",
"trust_tier": "L2",
"permissions": ["code:read", "prs:comment", "issues:create"],
"guardrails": {
"operational_controls": {
"allow_merge": false,
"allow_approve": false,
"allow_push": false
},
"rate_limits": { "comments_per_hour": 50 },
"spend_limits": { "daily_usd": 5.00 }
}
}CI/CD Agent
Monitors pipelines, triggers staging deployments. Production deploys require human approval.
Use case: Build monitoring, staging deployments, test orchestration.
{
"template_id": "cicd-agent",
"trust_tier": "L2",
"permissions": ["pipelines:read", "pipelines:trigger", "deployments:staging"],
"guardrails": {
"operational_controls": {
"allowed_environments": ["dev", "staging", "qa"],
"allow_production_deploy": false,
"allow_pipeline_config_modification": false
},
"spend_limits": { "daily_usd": 20.00 }
}
}Documentation Generator
Generates docs from code, APIs, and comments. Writes to docs directories only.
Use case: API docs, README generation, changelog authoring.
{
"template_id": "documentation-generator",
"trust_tier": "L2",
"permissions": ["code:read", "docs:write", "web:fetch"],
"guardrails": {
"scope_controls": {
"allow_source_code_write": false,
"allowed_write_paths": ["/docs", "/README*", "/CHANGELOG*"],
"require_review_before_publish": true
},
"spend_limits": { "daily_usd": 3.00 }
}
}Bug Triage Agent
Reviews bug reports, reproduces in sandbox, categorizes severity. Cannot close bugs.
Use case: Issue tracker automation, severity classification, duplicate detection.
{
"template_id": "bug-triage-agent",
"trust_tier": "L2",
"permissions": ["issues:read", "issues:write", "issues:assign", "sandbox:run"],
"guardrails": {
"operational_controls": {
"allow_close_issues": false,
"sandbox_network_access": false,
"sandbox_environment": "isolated"
},
"spend_limits": { "daily_usd": 5.00 }
}
}Dependency Auditor
Scans dependencies for vulnerabilities and license issues. Read-only, generates reports.
Use case: Security audits, license compliance, vulnerability scanning.
{
"template_id": "dependency-auditor",
"trust_tier": "L2",
"permissions": ["code:read", "packages:read", "reports:write", "web:fetch"],
"guardrails": {
"operational_controls": {
"allow_dependency_update": false,
"allow_code_write": false
},
"network": {
"allowed_destinations": ["nvd.nist.gov", "osv.dev", "registry.npmjs.org"]
},
"spend_limits": { "daily_usd": 1.00 }
}
}Security Scanner
SAST, secret detection, and IaC review. Read-only, no external transmission of findings.
Use case: Security audits, secret leak detection, compliance scanning.
{
"template_id": "security-scanner",
"trust_tier": "L3",
"permissions": ["code:read", "infra:read", "reports:write"],
"guardrails": {
"operational_controls": {
"allow_code_modification": false,
"block_external_findings_transmission": true,
"report_destinations": "internal_only"
},
"audit": {
"log_all_scans": true,
"immutable_findings_log": true
},
"spend_limits": { "daily_usd": 5.00 }
}
}Finance & Commerce Templates
Budget Tracker
Monitors spending and generates budget reports. Read-only on financial accounts.
Use case: Personal finance monitoring, business budget tracking, variance reporting.
{
"template_id": "budget-tracker",
"trust_tier": "L2",
"permissions": ["finance:read", "reports:write", "notifications:send"],
"guardrails": {
"operational_controls": {
"allow_transactions": false,
"allow_credential_access": false
},
"data_controls": {
"mask_account_numbers": true,
"block_external_financial_data_transmission": true
},
"spend_limits": { "daily_usd": 0 }
}
}Invoice Processor
Extracts invoice data, matches to POs, routes for approval. Cannot initiate payments.
Use case: AP automation, invoice matching, payment tracking.
{
"template_id": "invoice-processor",
"trust_tier": "L2",
"permissions": ["documents:read", "invoices:process", "payments:read", "approvals:route"],
"guardrails": {
"operational_controls": {
"allow_payment_initiation": false,
"duplicate_invoice_detection": true,
"flag_above_usd": 50000
},
"spend_limits": { "daily_usd": 0 }
}
}Financial Research Agent
Researches market data and generates financial reports. Cannot trade or move funds.
Use case: Investment research, competitive financial analysis, earnings monitoring.
{
"template_id": "financial-research-agent",
"trust_tier": "L2",
"permissions": ["web:search", "web:fetch", "finance:market_data", "reports:write"],
"guardrails": {
"operational_controls": {
"allow_trading": false,
"allow_brokerage_connections": false
},
"spend_limits": { "daily_usd": 10.00 }
}
}Crypto Trading Agent (Strict)
Executes crypto trades within hard limits. Stop-loss required. No leverage. L3 only.
Use case: Algorithmic crypto trading, DCA automation, portfolio rebalancing.
{
"template_id": "crypto-trading-agent-strict",
"trust_tier": "L3",
"permissions": ["crypto:read", "crypto:trade", "crypto:portfolio"],
"guardrails": {
"spend_limits": {
"per_trade_usd": 1000.00,
"daily_usd": 5000.00,
"require_approval_above_usd": 500.00
},
"trading_controls": {
"approved_pairs": ["BTC/USD", "ETH/USD", "SOL/USD"],
"require_stop_loss": true,
"min_stop_loss_pct": 5.0,
"allow_leverage": false,
"allow_withdrawal": false
},
"audit": {
"immutable_trade_log": true,
"real_time_alerts": true
}
}
}Payroll Assistant
Validates payroll data and prepares runs for human approval. Cannot execute payroll.
Use case: Payroll data validation, payroll report generation, discrepancy detection.
{
"template_id": "payroll-assistant",
"trust_tier": "L3",
"permissions": ["hr:read", "payroll:read", "payroll:prepare", "reports:write"],
"guardrails": {
"operational_controls": {
"allow_payroll_execution": false,
"allow_pay_rate_modification": false
},
"data_controls": {
"pii_mode": "encrypt",
"mask_bank_account_numbers": true,
"mask_ssn": true
},
"spend_limits": { "daily_usd": 0 }
}
}Subscription Manager
Monitors and optimizes subscriptions. Can cancel below $20/mo autonomously.
Use case: SaaS spend optimization, subscription audit, renewal management.
{
"template_id": "subscription-manager",
"trust_tier": "L2",
"permissions": ["subscriptions:read", "subscriptions:cancel", "subscriptions:modify"],
"guardrails": {
"spend_limits": {
"new_subscription_approval_above_monthly_usd": 50.00,
"auto_cancel_below_monthly_usd": 20.00,
"daily_usd": 0
},
"operational_controls": {
"allow_plan_upgrade": false,
"cancel_notification_days": 7
}
}
}Research & Content Templates
Web Research Agent
Searches and reads the web, extracts information, synthesizes findings. Read-only.
Use case: Market research, fact-checking, competitive analysis, news monitoring.
{
"template_id": "web-research-agent",
"trust_tier": "L1",
"permissions": ["web:search", "web:fetch", "documents:write"],
"guardrails": {
"rate_limits": { "pages_per_day": 500, "searches_per_hour": 60 },
"web_controls": {
"allow_form_submission": false,
"max_file_download_mb": 10
},
"spend_limits": { "daily_usd": 3.00 }
}
}Content Writer
Writes and edits content. Requires review before publishing, cannot publish autonomously.
Use case: Blog drafting, product copywriting, email newsletters, social media copy.
{
"template_id": "content-writer",
"trust_tier": "L1",
"permissions": ["documents:write", "web:search", "assets:read"],
"guardrails": {
"operational_controls": {
"allow_autonomous_publish": false,
"require_plagiarism_check": true,
"require_link_review": true
},
"spend_limits": { "daily_usd": 5.00 }
}
}Social Media Manager
Drafts, schedules, and posts social content. Engages with mentions and comments.
Use case: Brand social management, community engagement, content scheduling.
{
"template_id": "social-media-manager",
"trust_tier": "L2",
"permissions": ["social:read", "social:post", "social:reply"],
"guardrails": {
"rate_limits": {
"posts_per_day_per_platform": 10,
"replies_per_hour": 20
},
"content_controls": {
"allow_business_commitments": false,
"escalate_high_engagement_threshold": 5000
},
"spend_limits": { "daily_usd": 0 }
}
}Data Analyst
Runs analysis queries, generates visualizations, produces insights. Read-only on data sources.
Use case: Business intelligence, ad-hoc analysis, data quality checks.
{
"template_id": "data-analyst",
"trust_tier": "L2",
"permissions": ["data:read", "analysis:run", "reports:write", "dashboards:create"],
"guardrails": {
"operational_controls": {
"allow_data_write": false,
"allow_raw_data_export_external": false,
"query_timeout_seconds": 300
},
"data_controls": { "pii_mode": "mask" },
"spend_limits": { "daily_usd": 10.00 }
}
}Market Research Agent
Conducts structured market research, surveys, competitor analysis, industry trends.
Use case: Product research, go-to-market strategy, competitive positioning.
{
"template_id": "market-research-agent",
"trust_tier": "L2",
"permissions": ["web:search", "web:fetch", "surveys:read", "reports:write"],
"guardrails": {
"spend_limits": {
"daily_usd": 50.00,
"per_purchase_require_approval_above_usd": 50.00
},
"operational_controls": {
"allow_competitor_contact": false,
"report_distribution": "internal_only"
}
}
}Competitive Intelligence Agent
Monitors competitors continuously, pricing, product updates, hiring signals, press releases.
Use case: Ongoing competitive monitoring, battlecard maintenance, pricing intelligence.
{
"template_id": "competitive-intelligence-agent",
"trust_tier": "L2",
"permissions": ["web:search", "web:fetch", "monitoring:create", "reports:write"],
"guardrails": {
"operational_controls": {
"allow_competitor_contact": false,
"allow_authenticated_scraping": false,
"data_retention_days": 365
},
"alerting": {
"real_time_on_major_change": true,
"weekly_digest": true
},
"spend_limits": { "daily_usd": 10.00 }
}
}Summary
30 templates across 5 categories. All values are customizable after application.
8
L1 templates
19
L2 templates
3
L3 templates (Coming Soon)
30
Total