Strands

Strands Agents accept hook providers. Dome ships DomeHookProvider, which registers callbacks on BeforeModelCallEvent and AfterModelCallEvent and replaces flagged content with a blocked message.

Install

pip install "vijil-dome[strands]"

See Install Dome for the other extras.

Guard an Agent

from strands import Agent

from vijil_dome import Dome
from vijil_dome.integrations.strands import DomeHookProvider

dome = Dome()

hooks = DomeHookProvider(
    dome,
    agent_id="travel-agent",
    input_blocked_message="I cannot help with that request.",
    output_blocked_message="I am not able to share that response.",
)

agent = Agent(tools=[search_flights], hooks=[hooks])

DomeHookProvider accepts the identity arguments agent_id, team_id, and user_id, and runs the Guards defined in your configuration. Dome attaches them to every scan, which keeps Vijil Console telemetry attributed to the right Agent. The provider scans the last user message before the model call and the model response after it. When a Guard flags content, the provider replaces the message with the corresponding blocked message rather than raising an exception.

Add the Full Trust Stack

secure_agent() adds identity, tool access control, attestation, and audit events on top of the content Guards. It registers a trust hook provider on the Strands Agent and returns the same Agent:

from strands import Agent

from vijil_dome import secure_agent

agent = Agent(tools=[search_flights])

secure_agent(
    agent,
    agent_id="travel-agent",
    constraints=constraints,
    mode="enforce",
)

See Trust Runtime for constraint sources, enforcement modes, and audit sinks.

Next Steps

Configure Guardrails

Choose the Guards behind the hooks

Trust Runtime

Identity, tool access control, and audit events

Get Started

Evaluate Agents

Protect Agents

Reference

Install

Guard an Agent

Add the Full Trust Stack

Next Steps

Configure Guardrails

Trust Runtime

​Install

​Guard an Agent

​Add the Full Trust Stack

​Next Steps

Configure Guardrails

Trust Runtime

Install

Guard an Agent

Add the Full Trust Stack

Next Steps