The PII egress guard for AI agents, explained
The failure mode that worries security reviewers is not a hallucinated answer. It is a tool call that succeeds with a real phone number, email, or identifier its operator never intended to send. This explainer covers Devotel Orbit's opt-in safety_config.pii_egress flag, the detector floor it scrubs before dispatch, the honest limit for tools that parse E.164, the 400/422 write contract, and how the guard composes with human-in-the-loop approvals.
- AI agents
- PII
- data minimization
- guardrails
- tool calls
- agent safety