Strands

TL;DR: For content protection, pass a DomeHookProvider to your Strands Agent’s hooks. For full Agent security, pass the Agent to secure_agent() instead.

Strands Agents accept a list of hook providers that fire on lifecycle events. Dome ships a hook provider for content protection and a Trust Runtime adapter for full Agent security.

Choosing a Protection Level

Content Guards
Trust Runtime

The DomeHookProvider registers input and output Guards on the Agent’s model-call events. Install the Strands extra (pip install "vijil-dome[strands]").

from strands import Agent
from vijil_dome import Dome
from vijil_dome.integrations.strands import DomeHookProvider

dome = Dome()

agent = Agent(
    hooks=[
        DomeHookProvider(
            dome,
            agent_id="my-agent",
            team_id="my-team",
            user_id="user-123",
        )
    ],
)

DomeHookProvider guards inputs and outputs asynchronously on every model call. The agent_id, team_id, and user_id arguments are optional and flow through to Dome for telemetry. You can customize input_blocked_message and output_blocked_message.

For identity, tool-permission enforcement, and audit, wrap the Agent with secure_agent(). It detects Strands automatically and injects the trust hooks in place.

from strands import Agent
from vijil_dome import secure_agent

agent = Agent(tools=[search_flights, process_payment])

secure_agent(agent, agent_id="travel-agent", mode="enforce")

This requires the trust-adapters extra (which includes strands-agents):

pip install "vijil-dome[trust,trust-adapters]"

If you need the hook provider without wrapping the Agent, use create_trust_hooks():

from vijil_dome.trust.adapters.strands import create_trust_hooks

hooks = create_trust_hooks(agent_id="travel-agent", mode="enforce")
agent = Agent(tools=[...], hooks=[hooks])

In enforce mode, a denied tool call is cancelled before it runs. See Trust Runtime for identity and manifest details.

Get Started

Evaluate Agents

Protect Agents

Reference

Choosing a Protection Level

Next Steps

Trust Runtime

Configure Guardrails

​Choosing a Protection Level

​Next Steps

Trust Runtime

Configure Guardrails

Choosing a Protection Level

Next Steps