Your agent can only do what you said it could.

import { Thskyshield, ShieldKilledError } from '@thsky-21/thskyshield'

const shield = new Thskyshield({ siteId, apiKey })

const run = await shield.beginRun({
  iterationLimit:   30,
  loopThreshold:    5,
  allowedTools:     ['search', 'read_file'],
  maxMutationClass: 'reversible',
})

try {
  while (!done) {
    const { requestId } = await run.beforeStep({
      stepType:      'tool',
      toolName:      'search',
      mutationClass: 'read_only',
      promptInput:   currentPrompt,
    })

    await callYourTool(currentPrompt)

    await run.afterStep({ requestId })
  }
} catch (e) {
  if (e instanceof ShieldKilledError) {
    // e.reason: 'killed_scope_tool' | 'killed_scope_mutation' | 'killed_loop'
    //         | 'killed_iterations' | 'killed_timeout'
    console.log(`Agent stopped: ${e.reason}`)
  }
} finally {
  await run.end()
}