Telling your AI coding agent "please don't commit directly to main" is about as effective as asking your cat not to knock things off the table. LLMs are non-deterministic by nature - a polite prompt instruction is not a security boundary.
In this session, you'll learn how to enforce what you can't simply ask for. We'll dive into lifecycle hooks that intercept tool calls before they execute, blocking unauthorized Git commits, file deletions, or rogue shell commands at the architectural level. We'll also explore how to run coding agents autonomously and safely inside sandboxes - so your agent can do real work without being a liability.
Whether you're building agentic workflows or just trying to stop your AI colleague from pushing directly to production: this talk gives you the controls that prompts never will.
This talk has been presented at JSNation US 2026, check out the latest edition of this JavaScript Conference.























