Describe what the agent wants to change. TekCapitol returns Allow, Pause, or Block before the write reaches the system of record.
Sandbox policy · not your production policyPublic API: POST https://tekcapitol.com/api/v1/check-write with Authorization: Bearer $TEKCAPITOL_API_KEY. The playground above uses deterministic Sandbox policy (no key). Get a free tc_dev_ key via Add Check Write to My Agent.
Your application still performs the write. TekCapitol makes the decision immediately before it. Writes that bypass the Check Write call are outside that control path.