# Warden Guardrails

<figure><img src="https://2684022488-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOFDKnFMEMmJjoclGx9Hr%2Fuploads%2FrU20T9cvd3prm2J69RVm%2FScreenshot%202025-07-09%20at%2011.39.53%E2%80%AFPM.png?alt=media&#x26;token=130f09f1-735c-40d8-811d-3b71f40646af" alt=""><figcaption></figcaption></figure>

Warden acts as a deterministic policy enforcer for every agent action. It inspects, validates, and blocks any destructive or unauthorized operations before they reach your environment.

To start it open your terminal and write `stakpak warden`

### Example:

This runs Stakpak inside a Warden sandbox, mounts the Stakpak Token, and your AWS credentials

`stakpak warden -v ~/.stakpak/config.toml:/home/agent/.stakpak/config.toml:ro -v ~/.aws:/home/agent/.aws:ro`