Local AI Runtime
Stop AI tools from taking FileGuard-classified files through GenGuard surfaces, and see when an AI process references a classified path.
Local AI Runtime
Local AI Runtime keeps FileGuard-classified files out of local AI tools (Cursor, Claude, ChatGPT desktop, Codex, Windsurf, Warp, and similar) on stations running Agent One 4.0.3573+.
What ships today (no kernel driver)
| Control | What happens |
|---|---|
| GenGuard file surfaces | Paste, drag, and open-dialog paths that hit a classified file are handled with the Local AI Runtime mode you set (Watch / Warn / Stop). On Agent One 4.0.3582+, the same Windows surfaces also read the words in a Word, Excel, PowerPoint, PDF, or picture before it reaches a desktop AI app. |
| Process path observe | The station reports when a known AI process looks like it referenced a classified path (command line / image). This is visibility until the signed disk filter ships. |
Hard ReadFile / WriteFile deny for classified paths on disk needs the Microsoft-signed FileGuard minifilter (Agent One 6.x after driver signing). Ransomware protect stays on that same driver track.
Turn it on
- Entitle FileGuard for the organization.
- Open Security Policies → FileGuard.
- Enable Protect classified files from AI tools.
- Choose Watch only, Warn, or Stop.
- Leave process names empty to use the curated list, or add stems (comma-separated).
Stations need Agent One 4.0.3573+ (Certum EV signed build on the Cloud Portal). Classify files first (catalog or discovery) so the station has labels to enforce. Use Managed devices → Update or quiet Setup so every station reaches 4.0.3573 before you rely on Local AI Runtime in policy.