Governance Rules

The Rules page allows you to enable and disable governance policies that control how agents can behave. These rules are enforced automatically by the ContextFort extension.

​

Overview

Governance rules:

• Control agent actions like navigation and output
• Are enforced automatically by background scripts and content scripts
• Can be toggled on/off with a simple switch
• Log instances when they block actions (see Instances page)

​

Rules Summary

The summary card shows:

• X / Y: Number of enabled rules out of total available
• Total Rules badge: Total number of governance rules

​

Available Rules

ContextFort currently provides two governance rules:

​

Disallow URLs with Query Parameters

Rule ID: disallow_query_params Description: Prevents the agent from opening any URLs that contain query parameters (e.g., ?param=value). This protects against potential data leakage through URL parameters and ensures agents only visit clean, parameterless URLs. Use case:

• Prevent agents from accessing URLs with sensitive data in parameters
• Ensure clean, bookmark-able URLs
• Avoid tracking parameters

Example blocked URLs:

• https://example.com/page?token=secret123
• https://example.com/search?q=sensitive+query
• https://example.com/page?user_id=12345

Example allowed URLs:

• https://example.com/page
• https://example.com/search
• https://example.com/docs/guide

​

Disallow Printing Clickable URLs in Sidechat

Rule ID: disallow_clickable_urls Description: Prevents the agent from printing any clickable URLs in the Claude sidechat interface. This ensures that sensitive or internal URLs cannot be accidentally exposed or shared through the chat interface. Use case:

• Prevent internal URLs from appearing in chat logs
• Avoid exposing sensitive endpoints
• Keep chat output clean and secure

How it works:

• Content scripts monitor the Claude sidechat
• Clickable URLs (links) are removed or replaced with plain text
• Non-clickable URL text may still appear

​

Enabling/Disabling Rules

​

Rules Table

The table displays all available governance rules.

​

Table Columns

​

Rule Enforcement

When a rule is enabled:

1. The rule configuration is saved to chrome.storage.local (key: governanceRules)
2. A message is sent to the background script:
   chrome.runtime.sendMessage({
     type: 'RELOAD_GOVERNANCE_RULES',
     rules: { disallow_query_params: true, ... }
   })
   
3. The background script updates its internal state
4. For DNR-based rules, declarativeNetRequest rules are updated
5. The rule is enforced on all future actions

​

Rule Instances

Every time a rule blocks an action, an instance is logged to Chrome storage:

• Instance ID: Unique identifier
• Rule ID: Which rule was triggered
• Timestamp: When it happened
• Details: What was blocked
• Session ID: Associated session (if any)

View instances on the Instances page.

​

Empty States

​

No Rules Configured

If you see this message:

• The rules list failed to load
• There was an error reading from storage
• The extension is not properly initialized

​

Refreshing Data

Click the Refresh button to reload rules from Chrome storage:

• Rule configurations are re-read from storage
• Toggle states are updated
• The summary is recalculated

​

Use Cases

​

Strict URL Control

Enable disallow_query_params to:

• Prevent agents from accessing tracking URLs
• Ensure clean URLs in session logs
• Block potential data leakage via parameters

​

Chat Security

Enable disallow_clickable_urls to:

• Keep internal URLs out of chat logs
• Prevent accidental URL sharing
• Maintain clean chat output

​

Compliance Policies

Combine rules to enforce organizational policies:

• No query parameters (data privacy)
• No clickable URLs (information security)
• Review instances for audit trails

​

Best Practices

​

Technical Details

The Rules page:

• Loads from chrome.storage.local (key: governanceRules)
• Stores rules as an object: { rule_id: boolean }
• Default state is false (disabled) for all rules
• Sends RELOAD_GOVERNANCE_RULES message on toggle
• Background script updates DNR rules for navigation-based policies
• Content scripts monitor for sidechat-based policies

​

Future Rules

ContextFort may add additional governance rules in future versions:

• Disallow file downloads
• Restrict specific HTTP methods
• Block access to local network addresses
• Limit request rate or frequency
• Enforce specific user agents

Check the Rules page after updates to see new options.

​

Next Steps