The agent policy: allowed, ask first, forbidden
Per action, decide what an agent may do alone. Corpole enforces it before the action.
Actions it covers
Database migrations, dependencies, CI/CD and infrastructure, security code, changing tests to make them pass, breaking public contracts, merging, pushing to main, production data, and Corpole's own actions.
How it is enforced
- Corpole actions: a forbidden tool call is refused by the server and logged.
- Code actions: the repository kit turns them into Claude Code permission rules (ask / deny).
- Agents read the policy once per session and in every work context.
Levels
Account and tenant set a baseline; projects inherit it and can only make it stricter.