policy/exec_allowlist_v0.json

{
  "version": "v0",
  "one_liner": "bounded exec is allowed only for a small approved command set inside the local sandbox",
  "allowed_commands": [
    "printf",
    "echo",
    "cat",
    "sed",
    "jq",
    "wc"
  ],
  "blocked_patterns": [
    "rm -rf /",
    "sudo ",
    "curl ",
    "wget ",
    "ssh ",
    "scp "
  ],
  "sandbox_prefixes": [
    "README.md",
    "api/",
    "benchmarks/",
    "bin/",
    "configs/",
    "docs/",
    "inference.yaml",
    "policy/",
    "runs/",
    "runtime/examples/",
    "runtime/",
    "schemas/",
    "scripts/",
    "self_improve.yaml",
    "hotgraph/",
    "ux/"
  ]
}