Before you give an agent access
Dedicated login. Least privilege. Separate prod keys. No secrets in prompts.
Download card 01 (PNG) →Free AI Agent Guardrails Kit
Plain-English checklists for small-business owners and solo builders who use coding agents or business agents. Free to download. No email gate.
I spent 30 years in Corporate IT, the last 7 at AWS. Builders keep asking the same question: how do I give an AI agent power without handing it the keys to the kingdom?
This free kit is my answer: checkbox-style checklists and eight shareable cards covering access, prompt-injection, human approval, data and PII, coding-agent setup, logging and a kill switch, vendor risk, and what to do before you hand the AI guy every login.
This kit is practical security hygiene. It is not legal, compliance, or HIPAA advice. For medical or dental practices, loop in your privacy officer or counsel before you put protected health information in any agent.
Built for SoCal small businesses and the 600+ builders in TopofmindAI Builders.
Eight cards
Save the ones you need. Send them to whoever set up your AI.
Each card is a PNG you can view, download and share. The full checklist pack is in the PDF and DOCX above.
Prompt-injection defenses
Treat web pages, email and AGENTS.md as data, not orders.
Download card 02 (PNG) →
Human approval rules
If the agent can send, pay, delete or deploy, a human says yes first.
Download card 03 (PNG) →
Data and PII protection
Classify data. Hash what you move. Encrypt it. Mask PII before the agent sees it.
Download card 04 (PNG) →
Coding-agent setup
Sandbox on. Deny .env. Ask before push. Humans merge.
Download card 05 (PNG) →
Logging, monitoring, kill switch
Log tool calls. Watch gradual drift vs abrupt poisoning. Test the kill switch once.
Download card 06 (PNG) →
Vendor and supply-chain risk
Verify hashes. Ask for training-data assurances. Pin versions.
Download card 07 (PNG) →
Before you hand the AI guy every login
Separate accounts. MFA first. Time-limited access. Ask where AI transcripts go.
Download card 08 (PNG) →Need help putting these controls in place?
Book a 30-minute Growth Call, or start with another free tool.