So far it is full access to everything for the agent, but since the actual socks implementation is a simple go program there's nothing stopping us from adding a dsl or guardrails that the proxies can understand.