RestriktAI: Enhancing Safety and Control for Autonomous AI Agents
João Lucas Duim, Juan Belieni · Team impactRIO
Submitted to AI Safety Entrepreneurship Hackathon. Sprint projects are early-stage work by participants, not Apart Research publications.
This proposal addresses a critical gap in AI safety by mitigating the risks posed by autonomous AI agents. These systems often require access to sensitive resources that expose them to vulnerabilities, misuse, or exploitation. Current AI solutions lack robust mechanisms for enforcing granular access controls or evaluating the safety of AI-generated scripts. We propose a comprehensive solution that confines scripts to predefined, sandboxed environments with strict operational boundaries, ensuring controlled and secure interactions with system resources. An integrated auditor LLM also evaluates scripts for potential vulnerabilities or malicious intent before execution, adding a critical layer of safety. Our solution utilizes a scalable, cloud-based infrastructure that adapts to diverse enterprise use cases.
Reviews
I like the overall direction of RestriktAI, but I have mixed feelings about their approach. Running LLMs in sandboxes isn't really groundbreaking, and using another LLM as an auditor is something we've seen before. That said, I'm pretty excited about their idea of developing a custom scripting language specifically for AI use, that's actually a fresh take that could open up some interesting possibilities for safer AI interactions.
The SQL injection demo is cool and shows the system works for current threats. The project seems too focused on immediate issues like jailbreaking, which might not be as relevant when we're dealing with more capable AI systems. While it's a solid starting point for improving current AI safety, I'm not fully convinced it'll scale well to address the deeper, more complex safety challenges.
some good ideas in there, I think the concepts could be a bit more clearly seperated, what is just automated red teaming vs. what is the proposed technical solution for the sandbox environment. Would look more strongly in either direction and provide more code. I would ask myself where my strengths are and which solution or approach (you also mentioned some governance elements in there) are best suited to be persuid by the team.
Cite this project
@misc{duim2025restriktai,
title = {{RestriktAI: Enhancing Safety and Control for Autonomous AI Agents}},
author = {João Lucas Duim and Juan Belieni},
year = {2025},
month = jan,
note = {Submitted to AI Safety Entrepreneurship Hackathon, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/restriktai-enhancing-safety-and-control-for-autonomous-ai-agents}},
url = {https://apartresearch.com/sprints/projects/restriktai-enhancing-safety-and-control-for-autonomous-ai-agents}
}More from AI Safety Entrepreneurship Hackathon
- 1st place by peer reviewView project: AntiMidas: Building Commercially-Viable Agents for Alignment Dataset Generation
AntiMidas: Building Commercially-Viable Agents for Alignment Dataset Generation
the commonwealth
AI alignment lacks high-quality, real-world preference data needed to align agentic superintel- ligent systems. Our technical innovation builds on Pacchiardi et al. (2023)’s breakthrough in detecting AI deception …
- View project: Scoped LLM: Enhancing Adversarial Robustness and Security Through Targeted Model Scoping
Scoped LLM: Enhancing Adversarial Robustness and Security Through Targeted Model Scoping
FocusAI
Even with Reinforcement Learning from Human or AI Feedback (RLHF/RLAIF) to avoid harmful outputs, fine-tuned Large Language Models (LLMs) often present insufficient refusals due to adversarial attacks causing them to …
- View project: Prompt+question Shield
Prompt+question Shield
Seon's team
A protective layer using prompt injections and difficult questions to guard comment sections from AI-driven spam.