actrpc-interceptor 0.1.0

Concrete interceptors for ActRPC.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

rules:
  - name: review_sensitive_write
    match_expr:
      all:
        - condition:
            fact: phase
            matcher:
              kind: exact
              value: outbound
        - condition:
            fact: message.method
            matcher:
              kind: exact
              value: write_file
        - condition:
            fact: message.params.path
            matcher:
              kind: glob
              value: /home/*/**
    apply:
      immediate:
        - exclude_interceptors:
            names:
              - transcript_logger
      review:
        title: Sensitive file write
        reason: Agent wants to write inside a user-owned directory.
        severity: high
        on_deny:
          - reject_call:
              error:
                code: -32051
                message: user denied sensitive file write