I've been building an MCP server and an AI Gateway as two separate projects designed specifically to prevent agents from doing effectively anything programmatically, rather than trying to convince them with a clever prompt not to do a bad thing.
My work can be found at https://DollhouseResearch.com, and it's almost all open source with the code on GitHub.
One of the key things is to have cryptographically confirmed audit logs and receipts for actions and decisions, and to separate out the agent's authorizations from the user's authorizations.
Separately, there is real work being done in the fintech community specifically to identify which agent has what control, when. And you can see some of the work there, which I've also contributed to.
Who the hell is downvoting this? I'm literally responding to a direct question with a direct answer, with a whole lot of information, open source software, and real work from another project.
You guys need your priorities straight, whoever you are.
People are allowed to have negative opinions of either the things you linked or the things you said about them, and also allowed to express them with downvotes. Complaining about it pretty much just makes it less likely for it to bounce out of negative votes after more people have read it than if you hadn't.
(Not my area, so I don't have any opinion on your first comment.)