dtwo Policy Store

Policies tagged "anti-exfil"

github · ingress

Fence GitHub Access to the Company Org Allowlist

Denies any GitHub tool call whose arguments.owner (read from input.payload.args.

githubfence-sensitive-scopesorg-allowlistanti-exfilingresssoc2

github · ingress

Prevent Public Exposure of GitHub Repos, Gists & Forks

Stops the agent from exposing private code to the public across three GitHub write tools, at ingress — before the call reaches the GitHub MCP server, so a…

githubdeny-public-exposureanti-exfilingresssoc2finserv-commseu-ai-act