Initial MVP: AI Agent Permission Guard — sandbox and audit AI agent actions with configurable policies

2026-06-18 06:30:32 +00:00
commit 6d9b37ede7
16 changed files with 1386 additions and 0 deletions
@@ -0,0 +1,22 @@
+{
+  "name": "readonly",
+  "version": "1.0.0",
+  "description": "Read-only policy — allows reading from project directory, blocks all writes, network, and exec.",
+  "defaultPermission": "deny",
+  "filesystem": [
+    {
+      "path": "./**",
+      "operations": ["read"],
+      "permission": "allow"
+    },
+    {
+      "path": "/tmp/**",
+      "operations": ["read", "write"],
+      "permission": "allow"
+    }
+  ],
+  "network": [],
+  "exec": [],
+  "envAllowlist": ["NODE_ENV", "PATH", "HOME"],
+  "auditLogPath": "./audit.log"
+}