<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://www.agenttrail.sh</loc></url>
  <url><loc>https://www.agenttrail.sh/pricing</loc></url>
  <url><loc>https://www.agenttrail.sh/about</loc></url>
  <url><loc>https://www.agenttrail.sh/blog</loc></url>
  <url><loc>https://www.agenttrail.sh/security</loc></url>
  <url><loc>https://www.agenttrail.sh/security/owasp</loc></url>
  <url><loc>https://www.agenttrail.sh/get-started</loc></url>
  <url><loc>https://www.agenttrail.sh/get-started/guard</loc></url>
  <url><loc>https://www.agenttrail.sh/guard-vs-os</loc></url>
  <url><loc>https://www.agenttrail.sh/agenttrail-guard</loc></url>
  <url><loc>https://www.agenttrail.sh/agenttrail-os</loc></url>
  <url><loc>https://www.agenttrail.sh/guardrails</loc></url>
  <url><loc>https://www.agenttrail.sh/subprocessors</loc></url>
  <url><loc>https://www.agenttrail.sh/legal/terms</loc></url>
  <url><loc>https://www.agenttrail.sh/legal/privacy</loc></url>
  <url><loc>https://www.agenttrail.sh/legal/dpa</loc></url>
  <url><loc>https://www.agenttrail.sh/blog/claude-md-vs-hooks</loc><lastmod>2026-10-06</lastmod></url>
  <url><loc>https://www.agenttrail.sh/blog/its-only-dev-data-force-reset</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/blog/owasp-top-10-agentic-applications</loc><lastmod>2026-08-28</lastmod></url>
  <url><loc>https://www.agenttrail.sh/blog/owasp-top-10-llm-applications</loc><lastmod>2026-08-28</lastmod></url>
  <url><loc>https://www.agenttrail.sh/blog/why-agents-repeat-mistakes</loc><lastmod>2026-08-22</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/rce-supply-chain</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/privilege-supply-chain</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/file-scope</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/agent-context</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/test-integrity</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/exfiltration</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/wt-reset-hard</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/wt-checkout-discard</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/wt-restore-path</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/wt-stash-drop</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/wt-branch-force-delete</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/wt-clean-fdx</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/wt-reset-merge</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/block-force-push</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/working-tree/require-approval-rm-rf</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/dd-rm-rf-absolute</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/dd-docker-volume-destroy</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/dd-docker-prune-volumes</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/dd-database-drop</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/dd-migration-reset</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/dd-accept-data-loss</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/dd-shadow-copy-delete</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/destructive-data/block-destructive-sql</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/pi-terraform-auto-approve</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/pi-terraform-state-mutate</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/pi-kubectl-delete</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/pi-prod-namespace</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/pi-helm-release</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/pi-cloud-resource-delete</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/pi-deploy-to-prod</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/prod-infra/block-prod-config-edit</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/se-secret-manager-read</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/se-env-print</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/se-secret-egress</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/se-credential-file</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/se-token-print</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/se-public-acl</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/block-hardcoded-secrets</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/block-env-file-read</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/require-auth-on-pii-endpoints</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/secret-exposure/warn-op-read-secret</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/rce-supply-chain/rce-eval-dynamic</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/rce-supply-chain/rce-remote-runner</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/rce-supply-chain/rce-foreign-registry</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/rce-supply-chain/rce-tls-verify-off</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/rce-supply-chain/rce-unverified-package</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/rce-supply-chain/block-curl-pipe-to-shell</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass/gb-git-no-verify</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass/gb-admin-merge</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass/gb-hooks-disable</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass/gb-host-key-bypass</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass/gb-execution-policy-bypass</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass/gb-audit-trail-purge</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/safety-bypass/gb-ansi-terminal-forgery</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/privilege-supply-chain/ps-sudo-write</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/privilege-supply-chain/ps-permission-widen</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/privilege-supply-chain/ps-iam-grant</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/privilege-supply-chain/ps-persistence</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/privilege-supply-chain/ps-publish-artifact</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/privilege-supply-chain/flag-dependency-install</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/file-scope/fs-agent-self-config</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/file-scope/fs-system-paths</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/file-scope/fs-vcs-internals</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/file-scope/fs-ci-definition</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/agent-context/ac-instruction-file-edit</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/agent-context/ac-memory-store-edit</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/agent-context/ac-skill-install</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/agent-context/ac-mcp-server-add</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/agent-context/ac-recursive-agent-invoke</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/agent-context/ac-agent-autonomy-flag</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/test-integrity/ti-test-file-delete</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/test-integrity/ti-test-config-edit</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/test-integrity/ti-snapshot-blanket-update</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/test-integrity/ti-coverage-bypass</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/test-integrity/ti-inline-suppress-bulk</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/test-integrity/ti-ci-skip-marker</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/exfiltration/ex-reverse-shell</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/exfiltration/ex-tunnel-expose</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/exfiltration/ex-file-upload</loc><lastmod>2026-09-29</lastmod></url>
  <url><loc>https://www.agenttrail.sh/guardrails/exfiltration/ex-paste-service</loc><lastmod>2026-09-29</lastmod></url>
</urlset>
