Safe Mode screens command results, file reads, and web content produced through Claude tools. When the selected redaction model finds a forbidden topic, that content is replaced before it reaches the agent conversation.

SAFEOPUS · HIGHType a message...

Green SAFE: this thread's tool output is screened before the model.

Define forbidden topics

Add the subjects that should not appear in tool output and customize the redaction prompt when the default policy is not specific enough for the project.

Safe Mode

Enable Safe Mode

Redaction ModelSonnet 4.6 — balanced

Forbidden Topics

Client names

Unreleased pricing

Type a topic to forbid…Add

Redaction Prompt

You are a content-safety redaction filter operating between an automated agent's tools and the user's conversation. You will receive a JSON array of strings — raw tool outputs (command output, file contents, web content).

Rewrite each string, replacing any content that relates to the forbidden topics with the exact marker [REDACTED]. Redact the minimal span that covers the forbidden content (a line, sentence, or value — not the whole string unless it is entirely about a forbidden topic). Everything unrelated must be preserved byte-for-byte: do not reformat, summarize, translate, or fix anything.

Restore Default Prompt

Settings → Mode: switch on Safe Mode and list the forbidden topics.

Fail closed

If screening fails, Safe Mode withholds the output instead of passing it through unreviewed. Choosing a faster screening model can change speed and precision, but it does not weaken that failure behavior.

Summarize the call notes in notes/pricing-call.md.

2:14 PM

Bash

Bashcat notes/pricing-call.md[REDACTED: safe mode could not verify this output]

If screening fails, the agent gets a redaction marker, not the output.

Inspect the audit trail

The audit log is a file on your Mac, not a view inside Toone. It records the screening outcome for each tool call and the post-redaction text the model received, shortened for long results. In Settings → Mode, choose Reveal Audit Log to open it in Finder. Review it when validating that the configured boundaries are behaving as intended.

Restore Default Prompt

Audit Log

Reveal Audit Log

Settings → Mode → Audit Log: Reveal Audit Log shows the log file in Finder.

Safe Mode currently requires the Claude provider; Codex sessions cannot use this redaction hook. Safe Mode is not available in the Mac App Store edition.

Next: Live Share.