You wrote never delete anything into the instructions, and you believe that is a wall.
Instructions are text, and text is something a model interprets. A long task can drift, and a hidden instruction inside a file it reads can push it. Almost every guardrail template online is only the sign.
Forty five minutes, and you will have a never list, a guardrails template you can walk away from, and real permission lists that hold when a written rule does not.
Marked intermediate, and worth doing before you leave anything running on its own.
The proof behind this
Liz Elliott built four software products with AI help: PRISM, AutoViral, UPRISE Social Studio, and Profounder, and she runs the operation across several computers. None of that runs unattended without a fence.
What this lesson is
Lesson 6.5 of the free AI for Entrepreneurs course, in Module 6: Trust And Safety.
There are two kinds of guardrail and people mix them up constantly. The first kind is a rule you write. Never delete anything. Never send without asking. Never touch the live version. The AI reads it and usually follows it, and usually is the important word, because instructions are text and text is something a model interprets rather than a lock it cannot pick. The second kind is enforcement. A permission set to always block. A command on a deny list. A tool you simply did not connect. Those do not depend on the AI cooperating, because it never gets the chance to decide. Think about a swimming pool. A sign that says no diving is the first kind. A fence with a locked gate is the second kind. You want both, and you should never mistake the sign for the fence. Almost every template you find online is the first kind, and they are still worth using, because they shape behaviour and make a task stoppable. The question to ask is never about trusting the AI. Ask what the worst thing it can reach is, and shrink that.
New here? Use the free AI for Entrepreneurs course outline to read this series in the best order.
What you will be able to do
Write a never list of actions AI may not take without you.
Tell the difference between a rule you wrote and a rule that is actually enforced.
Fill in a guardrails template that lets you walk away from a running task.
Set allow, deny, and ask lists in Claude Code, and test that the wall holds.
Audit a downloaded skill properly before it runs on your computer.
Your first step
Write your never list before you touch any settings. Five to ten lines, each one an action AI may not take without you saying yes first. Sending, spending, deleting, and anything that touches the live version of your work. Keep it short enough that you would actually enforce every line. That list is what you go and enforce in the rest of the lesson.
Behind the paywall
Your never list, written the way that actually holds up
The Agent Guardrails Template in full, for anything you leave running
Allow, deny, and ask lists in Claude Code, plus how to test that the wall holds
The free plugin that flags unsafe code, and what to do when it flags something
The Malware Finder project, and how to audit a downloaded skill properly
The mistakes that turn a fence back into a sign, and the checklist
What paid subscribers get overall
Paid subscribers get every part of AI for Entrepreneurs in full. Every numbered step, every prompt in a block you can copy, the mistakes list, and the checklist at the end. You also get the rest of the run as it goes out, and the whole paid archive on Liz on the Web.
Subscribing opens the locked half of this post right away. You do not wait for the next one. The rest of this lesson opens the moment you click.
The free half above is the concept, and it stands on its own. The locked half is the work.
<!-- native: divider -->
Click the button, subscribe, and the locked section below opens right away. You get this article now, and every other part in the series.
<!-- native: button url="https://www.lizontheweb.com/subscribe?" text="Subscribe to unlock this article now" -->
<!-- native: divider -->
The full walkthrough is below the paywall.
Click the button, subscribe, and the locked section below opens right away. You get this article now.
