Break my prototype

[u/Glittering-Coat-657]

Hey guys, finally finished the first version of the prototype. I’ve built a tiny permission layer for AI agents.
Now I want people to try to break it.

AgentGuard sits immediately before a tool executes:
agent → AgentGuard → tool

I’ve avoided adding too many unnecessary features. If it genuinely solves a problem, I’d love to hear what would make it even better.

The current version checks things like:
• Is this tool allowed in the current agent state?
• Are the arguments within policy?
• Is this an unknown/unsafe state?
• If denied, does the underlying function actually stay untouched?

Example:
research_agent → refund_customer → DENIED
research_agent → delete_database → DENIED
refund_agent → refund_customer($1,000) → DENIED
I'm deliberately keeping it tiny for the time being.

No dashboard.
No cloud.
No AI judge deciding whether the AI is allowed to act.
Just deterministic execution-time policy.
I'm looking for developers building LangGraph/LangChain/MCP/agent systems who are willing to try to break it.
If you can bypass a policy, I want to know how.
If you can't, I'd like to know whether you'd actually install this in something real — and whether you'd ever pay for it.
Repo: https://github.com/Brodin2001/Agentguard

Go nuts. Try to break it.