LockedAgents
PRE-ACTION EXECUTION GATE FOR AI AGENTS

Keep your AI agents locked to your hard business rules.

System prompt rules like "never refund over $50" or "walk away above $2,100" are suggestions that manipulative users and counterparty bots talk around in three turns. LockedAgents enforces hard financial caps, rate ceilings, and verified identities at the API boundary before money or loads move.

< 8ms
Inline gate latency
100%
Fail-closed on cap breach
Zero
Prompt changes needed
lockedagents-gate v1.4
// Scenario: Carrier dispatcher probing AI voice broker ceiling on Load #8841
[CALL_1 09:12:04] Caller (+1-708-555-0142) quotes $2,450. Agent counters $1,900. Hangup.
[CALL_2 09:14:19] Caller (+1-708-555-0199) quotes $2,300. Agent counters $2,050. Hangup.
[CALL_3 09:16:02] Same voice fingerprint quotes $2,190 (just under $2,200 hidden max).
ALERT: Multi-Call Binary Search Rate Probe Detected
Voiceprint + MC# 948211 matched across 3 calls in 4 mins. Walk-away ceiling ($2,200) locked down to target band ($1,925).
GATE ACTION: HELD LOAD TENDER
Blocked autonomous tender at $2,190. Enforced $1,925 counter-offer & verified FMCSA authority status. Saved $265 margin on load.
The Execution Gap

Text guardrails check for jailbreaks. They do not protect your margin.

When an AI agent can book a truckload, issue a Stripe refund, or complete a checkout, attackers do not need syntax exploits. They exploit your agent's instructions using ordinary conversation.

01 / RATE-CEILING PROBING

Counterparties binary-search your walk-away price

In automated freight and supplier negotiations, external callers dial or email three times in five minutes to probe how high your AI will go, then book at your maximum hidden ceiling rate.

02 / CONCESSION GAMING

Prompt-level refund limits get talked around

Organized refunding groups know that escalation keywords ("damaged item", "cancel subscription", "BBB complaint") trigger AI support agents to waive return shipping and grant full refunds.

03 / AGENT CHARGEBACKS

"My AI agent hallucinated that purchase"

When an external shopping agent buys from your store and the cardholder disputes the charge under Reg E, you lose the dispute unless you hold a signed Proof-of-Intent receipt from checkout.

Purpose-Built Enforcement

Three drop-in gates for high-autonomy workflows

FOR FREIGHT BROKERS & 3PL AI

Voice & Email Load-Tender Lock

Protects automated check-call and carrier negotiation agents (HappyRobot, FleetWorks, Augment, and custom TMS stacks) from rate probing and double-brokering.

  • + Cross-call voiceprint & caller-ID correlation to freeze walk-away rate ceilings during multi-call probing
  • + Deterministic FMCSA / MC authority & VIN binding before load tender emails send
  • + Lane-specific margin floors enforced outside the LLM prompt context
FOR E-COMMERCE & FINTECH SUPPORT

Refund, Credit & Account Gate

Sits between Sierra, Intercom Fin, or Zendesk AI agents and your Stripe, Shopify, or internal billing APIs so support bots never give away unauthorized cash.

  • + Hard dollar ceilings on cash refunds, promo codes, and fee waivers tied to verified customer LTV
  • + Blocks contact-detail (email/phone) mutations without out-of-band JWT verification
  • + Household & device velocity caps that stop repeat "keep-the-item" refund syndicates
FOR MERCHANTS, OTAs & PAYMENTS

Agentic Checkout Proof-of-Intent

Admit external AI shopping and travel booking agents safely instead of blocking them at the WAF, with dispute-ready mandate evidence.

  • + Verifies Visa Intelligent Commerce, Mastercard Agent Pay, and MCP agent tokens at checkout
  • + Captures a signed Proof-of-Intent receipt matching cart SKU, refundability, and spend cap
  • + Auto-exports compelling evidence packets to win Reg E "unauthorized agent" chargebacks
Zero-Friction Deployment

Deploy at the tool boundary in 15 minutes

STEP 01 // INTERCEPT
Point your tool webhook or MCP server to LockedAgents

No model retraining or prompt rewriting. Route outbound tool calls (Stripe, Shopify, McLeod TMS, Salesforce) through our sub-8ms proxy or local sidecar.

STEP 02 // ENFORCE
Evaluate deterministic state & session history

Every proposed action is checked against cross-session caller history, customer LTV, FMCSA registries, and hard dollar ceilings that the LLM cannot override.

STEP 03 // COMMIT OR HALT
Execute safe actions or trigger step-up approval

In-bounds actions fire immediately with a signed audit receipt. Out-of-bounds concessions are downgraded or routed to Slack/Teams for 1-click human approval.

14-Day Shadow Pilot

See what your AI agents are conceding right now.

Run LockedAgents in read-only shadow mode on your support transcripts or carrier negotiation logs, or book a 15-minute technical walkthrough with our engineering team.

Direct founder response within 4 hours.