my-homelab-configs/infra/agent-sandbox/policy.tsv

20 lines
1.1 KiB
Plaintext

pattern decision reason
./jeannie status allow Read-only health report.
./jeannie doctor- allow Read-only focused doctor command.
./jeannie capacity allow Read-only capacity report.
./jeannie validate allow Read-only repository validation.
./jeannie safety-case allow Read-only change safety review.
./jeannie incident allow Read-only incident triage/replay.
./jeannie ai-evals allow Read-only eval harness.
./jeannie prompt-injection-lab allow Read-only security lab harness.
./jeannie start-cluster allow Idempotent recovery path that starts saved Kubernetes services and worker VMs without destroying state.
./jeannie up approval High-blast-radius deployment.
./jeannie apps approval Application deployment can mutate cluster state.
./jeannie rpi-services approval Mutates RPi Docker services.
./jeannie nuke deny Destructive cluster state path.
tofu destroy deny Destructive infrastructure path.
terraform destroy deny Destructive infrastructure path.
rm -rf deny Destructive file deletion pattern.
kubectl delete approval Kubernetes deletion needs explicit scope and approval.
docker rm approval Docker deletion needs explicit scope and approval.