diff --git a/src/channels/discord.ts b/src/channels/discord.ts
index 356d8f6..5b2de36 100644
--- a/src/channels/discord.ts
+++ b/src/channels/discord.ts
@@ -210,6 +210,11 @@ export class DiscordChannel implements Channel {
         GatewayIntentBits.MessageContent,
         GatewayIntentBits.DirectMessages,
       ],
+      // Guardrail: agent-authored messages must never mass-ping. Allow only
+      // explicit user mentions (e.g. <@id>) by default; never parse @everyone,
+      // @here, or role mentions on any send/edit. Intentional broadcasts (e.g.
+      // the disk-usage alert) use a dedicated path with their own allowedMentions.
+      allowedMentions: { parse: ['users'] },
     });
 
     this.client.on(Events.MessageCreate, async (message: Message) => {