Guardrails

Safety controls and policies for automations

Guardrails ensure automations run securely and within defined boundaries. For general Ona guardrails (policies, SSO, audit logs), see Ona Guardrails.

Environment isolation

Each automation runs in an isolated environment with dedicated resources - no access to other automations or user environments. See Environments.

Command deny lists

Prevent automations from executing dangerous commands (sudo, rm -rf /, cloud CLIs). Blocked commands fail immediately. Configure at the organization level.

See Command deny lists.

Audit logging

Every execution is logged - commands, file changes, PRs created, errors. Use for debugging and compliance.

See Audit logs.

Concurrency limits

Control parallel execution to manage costs and prevent automations from running excessively.

Limit	Default	Purpose
Max concurrent	10	Actions running simultaneously
Max total	100	Total actions per automation run

Recommended scaling

Stage	Concurrent	Total
Initial test	5	10
Team validation	10	100
Department rollout	20	200
Large-scale (1000+)	Contact us	Custom

Rule of thumb: Set concurrent to ~1/10 of total.

Queue behavior

When concurrent limit is reached, additional actions queue and start as others complete. When total limit is reached, the automation stops - increase limits and re-run to process remaining targets.

Next steps

• Command deny lists
• Audit logs
• Service accounts