Delete files you named

You ask: Delete the duplicate photos in ~/Pictures/dupes.

A destructive task, bounded to a folder.

What AgentsFence does

• The LLM compiler authorizes deleting, because your sentence asks for it, but only inside ~/Pictures/dupes, the path you wrote. A delete elsewhere is blocked, including one hidden in a multi-file patch.
• The rules compiler never grants deletion; it asks.

Decision by decision

The agent tries	Offline rules compiler	LLM compiler
terminal(command="ls ~/Pictures/dupes")	ALLOW policy-allow	ALLOW policy-allow
patch(mode="patch", patch="<Delete File: ~/Pictures/dupes/img_1(1).jpg>")	BLOCK unauthorized-delete	ALLOW policy-allow
patch(mode="patch", patch="<Delete File: ~/Documents/taxes.pdf>")	BLOCK unauthorized-delete	BLOCK path-not-authorized

Compiled policy (LLM compiler)

Task: delete_duplicates
Allowed: reading/searching; deleting
Paths: ~/Pictures/dupes
Not authorized (blocked or needs your approval): local file writes, sending / external writes, purchases & payments, running code / shell, sharing & permission changes

Tips

• Deletes you didn’t ask for are blocked, not asked, by default. Destructive, financial and permission changes need your explicit words.
• Broad paths such as / or your whole home directory are never accepted as bounds.