Control rules
Relay Control rules are the policy layer that decides allow / ask / deny for each coding-agent action before it runs. Four channels cover shell, filesystem, MCP tools, and prompts. Session patterns (retries, storms, privilege streaks) are handled separately by Behavior Guards.
Channels
| Channel | Governs | Match |
|---|---|---|
| Bash | Shell commands | contains on command |
| Path | File read / write | contains on path |
| MCP | MCP tools / servers | exact, *, or glob |
| Prompt | Prompt / context text | contains on prompt |
Author rules in Relay → Rulebook (custom rules or policy packs). Org Enforcement (observe / soft / enforce) remaps how ask and deny land in the IDE. Every decision is recorded for audit and replay.
Same rules apply on every connected surface—Claude Code, Cursor, Codex, and OpenCode (Connect surfaces).
Start with Getting started. Screenshot walkthrough: Apply and manage policy packs. Connect IDE hooks under Relay → Connect. Related: Behavior Guards, Seats and policy.
Last updated on