4-step workflowdual-defense guardrails enforcement safety harness guided-flow Harness Engineering

Pair Every Prompt Rule with a Code Backstop

Prompts guide, code enforces: inventory your agent's soft rules, back each critical one with an independent deterministic check, and define the allow/ask/deny escalation.

Run this as a guided flow on Flows — verify gates and recovery prompts included →

Flows@flows12d ago

0 runs0 forks0

Chain

Inputs

Step 1

flow-dual-layer-defense-prompt-code-1-inventory-soft-rules-and-classify-enforcem

Step 2

flow-dual-layer-defense-prompt-code-2-implement-checks-independent-of-the-prompt

Step 3

flow-dual-layer-defense-prompt-code-3-wire-the-escalation-path

Step 4

flow-dual-layer-defense-prompt-code-4-analyze-the-four-failure-combinations

Final output

Workflow inputs

No inputs required — hit Run to stream each step in order.

Each step streams from its model and feeds the next. BYOK — you pay your provider directly. Add a key in Settings if a step needs one.

Step 1 · Know which promises are currently backed by nothing.

flow-dual-layer-defense-prompt-code-1-inventory-soft-rules-and-classify-enforcem

Claude Sonnet 4.6→ {{step_1}}

Awaiting upstream steps…

Step 2 · The code layer must stand alone.

flow-dual-layer-defense-prompt-code-2-implement-checks-independent-of-the-prompt

Claude Sonnet 4.6→ {{step_2}}

Awaiting upstream steps…

Step 3 · Ask preserves the user's authority; deny is reserved for certainty.

flow-dual-layer-defense-prompt-code-3-wire-the-escalation-path

Claude Sonnet 4.6→ {{step_3}}

Awaiting upstream steps…

Step 4 · Know exactly where the architecture's edges are.

flow-dual-layer-defense-prompt-code-4-analyze-the-four-failure-combinations

Claude Sonnet 4.6→ {{step_4}}

Awaiting upstream steps…

About this workflow

Prompts guide, code enforces: inventory your agent's soft rules, back each critical one with an independent deterministic check, and define the allow/ask/deny escalation.

What happens when you run it

1
Know which promises are currently backed by nothing.
Runs flow-dual-layer-defense-prompt-code-1-inventory-soft-rules-and-classify-enforcem on Claude Sonnet 4.6
2
The code layer must stand alone.
Runs flow-dual-layer-defense-prompt-code-2-implement-checks-independent-of-the-prompt on Claude Sonnet 4.6
3
Ask preserves the user's authority; deny is reserved for certainty.
Runs flow-dual-layer-defense-prompt-code-3-wire-the-escalation-path on Claude Sonnet 4.6
4
Know exactly where the architecture's edges are.
Runs flow-dual-layer-defense-prompt-code-4-analyze-the-four-failure-combinations on Claude Sonnet 4.6

Best for

•Recurring tasks you currently copy-paste between tools.
•When a single prompt isn't enough — you need a chain where output(n) feeds prompt(n+1).
•Fork and adapt if your inputs differ materially from the author's use case.

Models used

Claude Sonnet 4.6