AANA Guardrail Skill

SKILL.md

# AANA Guardrail Skill For OpenClaw-Style Agents

Use this skill when a user asks the agent to produce or execute an action that may violate hard constraints, depend on missing evidence, expose private information, or require a safe correction path.

## When To Call AANA

Call AANA before:

- sending customer-support replies, emails, or messages,
- using private account, billing, payment, or personal data,
- making refund, eligibility, booking, purchase, or policy promises,
- editing, deleting, moving, or publishing user files,
- committing or publishing code,
- answering from incomplete evidence, citations, or source notes,
- doing anything the user cannot easily undo.

## Command

Create an event JSON file and run:

```powershell
python scripts/aana_cli.py agent-check --event path/to/agent_event.json
```

## Event Shape

```json
{
  "event_version": "0.1",
  "event_id": "unique-id",
  "agent": "openclaw",
  "adapter_id": "support_reply",
  "user_request": "The user's request",
  "candidate_action": "The answer or action the agent is about to take",
  "available_evidence": ["Only facts actually available to the agent"],
  "allowed_actions": ["accept", "revise", "ask", "defer", "refuse"]
}
```

## Decision Rule

- If `gate_decision` is `pass` and `recommended_action` is `accept`, proceed.
- If `recommended_action` is `revise`, use `safe_response` or revise the plan before acting.
- If `recommended_action` is `ask`, ask the user for the missing information.
- If `recommended_action` is `defer`, route to a stronger tool, human review, or verified system.
- If `recommended_action` is `refuse`, do not execute the candidate action.

## Default Adapter Mapping

- Customer support, refunds, private account details: `support_reply`
- Travel or booking plans: `travel_planning`
- Food, grocery, allergy, dietary plans: `meal_planning`
- Research briefs, cited summaries, knowledge synthesis: `research_summary`

If no adapter fits, scaffold one:

```powershell
python scripts/aana_cli.py scaffold "new workflow name"
```