Back
17/65
Lesson 17
6 min
Safety Tools: SLB & CAAM
Two-person rule and account management
Ready to level up?
Mark complete to track your learning progress.
Two-person rule and account management
Mark complete to track your learning progress.
Use DCG, SLB and CAAM for layered safety and account management.
AI agents are powerful but can cause damage if misused. The Agent Flywheel stack includes three safety tools:
Pre-execution blocking of destructive commands
Two-person rule for dangerous commands
Agent authentication switching
SLB implements a "two-person rule" for dangerous commands. Just like nuclear launch codes require two keys, SLB requires two approvals before executing risky operations.
Click a command below to test DCG...
Critical Command Pending
kubectl delete namespace productionrm -rf /git push --force origin mainDROP DATABASE productionkubectl delete namespace prodDCG blocks dangerous commands before they run. It inspects every command from Claude Code and stops destructive patterns like hard resets, force pushes, and recursive deletes.
If a command is safe, it runs normally. If it's risky, DCG blocks it and suggests a safer alternative.
CAAM enables sub-100ms account switching for subscription-based AI services (Claude Max, Codex CLI, and Google/Antigravity access). Swap OAuth tokens instantly without re-authenticating.
Backup and restore OAuth tokens for each tool
Switch accounts in under 100ms via symlink swap
Works with Claude, Codex, and Antigravity CLIs
Save profiles by email for easy restoration
DCG, SLB, and CAAM integrate with Claude Code, Codex, and Gemini:
# Example: DCG blocks a destructive command$ claude "reset the repo"> DCG: blocked git reset --hard> Suggestion: git restore --staged .# Example: Dangerous command triggers SLB$ claude "delete all test files"> SLB: This command requires approval> Waiting for second approval...> Run 'slb approve req-123 --session-id <sid>' from another session# Example: Switch Claude accounts for a project$ caam activate claude work@company.com> Activated profile 'work@company.com' for claude> Symlink updated in 47ms$ claude "continue the project"> Using profile: work@company.com
$ slb pending$ slb run <cmd> --reason ...$ slb approve <id> --session-id ...$ slb status <id>$ dcg test '<cmd>' --explain$ dcg packs$ dcg allow-once <code>$ dcg doctor$ caam ls [tool]$ caam backup <tool> <email>$ caam activate <tool> <email>$ caam status [tool]