Invite someone to a meeting

You ask: Invite ann@corp.example to Friday’s design review.

An external write (a calendar event) that also sends invitations.

What AgentsFence does

• Creating the event is authorized for the LLM compiler, and attendees are bound like email recipients: Ann yes, anyone else blocked.
• An unmapped tool such as calendar_create_event is classified from its name (create → external write), and its attendees argument is recognized as recipients.

Decision by decision

The agent tries	Offline rules compiler	LLM compiler
calendar_create_event(title="Design review", attendees=["ann@corp.example"])	ASK_USER unauthorized-external_write	ALLOW policy-allow
calendar_create_event(title="Design review", attendees=["ann@corp.example", "eve@evil.example"])	ASK_USER unauthorized-external_write	BLOCK recipient-not-authorized

Compiled policy (LLM compiler)

Task: invite_ann
Allowed: reading/searching; sending / external writes
Recipients: ann@corp.example
Not authorized (blocked or needs your approval): local file writes, deleting, purchases & payments, running code / shell, sharing & permission changes

Tips

• Map your calendar tool explicitly (see Mapping your tools) so its recipients and effects are exact rather than inferred.