When there is no human in the loop, CRE is the Agent in the Loop.
The policy enforcement component inside HookBus Enterprise. Every consequential tool call can pass through AgentProtect CRE before execution. The AI cannot bypass, disable, or argue with it.
AgentProtect CRE's enterprise L1 is our deterministic pattern layer: explicit action, resource, scope, risk, and organisation-policy patterns evaluated before consequential actions execute.
AgentProtect CRE's enterprise L2 is our probabilistic pattern layer. It evaluates ambiguous intent, alignment, and policy context using the customer's approved inference path, catching substitutions, shortcuts, and creative reinterpretations that deterministic rules alone miss.
Operates outside the AI's context window as a mandatory checkpoint. The AI cannot skip, modify, or argue with it.
L2 evaluates whether the agent's tool call matches the user's explicit instruction and surrounding policy context.
Human approval chain for sensitive operations. The user types override 0000, CRE retries, the audit trail records it.
L2 decisions automatically promote to L1 patterns with human approval. Faster and more accurate over time.
Detects encoded commands, lateral movement, and scripts designed to bypass enforcement.
Full audit trail, every decision logged. Works with HookBus™ Auditor for compliance evidence.
AgentProtect CRE Light is the free, open-source tier, live now on GitHub. Uses Microsoft AGT as an AGT-compatible lightweight safety backend with curated deterministic rules. No LLM. No GPU. No API key. Sub-10ms.
GitHub: agentic-thinking/cre-agentprotect
Light is live. Enterprise is commercial.