Agent WranglersHostile agents and bots Required
Log agent actions and let users undo them
Record which agent did what for which user, and make its changes easy to undo.
How to do it
Store the agent's name and token ID with every change it makes. Show the user a history of agent actions. Prefer soft deletes and drafts for anything an agent changes, and let the user undo them.
How to check
Have a test agent change a test record. The history shows the agent by name, and one undo restores the record.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/hostile-agents-and-bots/reversible-agent-actions.