// GLOSSARY -- AGENTIC FINANCE
What is an Agent Denylist?
A denylist blocks an agent from transacting with specific addresses, contracts, or services. Any denylisted recipient is immediately blocked regardless of other policy conditions.
WHY IT MATTERS
Denylists define where agents absolutely cannot send. Useful for known malicious addresses, sanctioned entities, and compromised contracts.
Often organization-wide, shared across the fleet. When a scam address is identified, adding it protects all agents immediately.
Sources include threat intelligence feeds, OFAC sanctions, on-chain security providers, and custom rules.
HOW POLICYLAYER USES THIS
PolicyLayer enforces denylists with highest priority — a denylisted recipient always blocks, even if the transaction would otherwise pass.
FREQUENTLY ASKED QUESTIONS
Auto-update?
PolicyLayer integrates with external threat feeds for automatic updates. Manual entries via API/dashboard.
Override other policies?
Yes. Denylist is absolute — always blocks regardless of amount, allowlist, or other conditions.
Block categories?
Yes — pattern-based denylists can block entire contract types like mixers.