assay-cli 3.26.0

Policy-as-code gate for MCP agent tool calls, with verifiable evidence and Linux kernel enforcement.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

# Generated by `assay sandbox --profile`
api_version: 1
extends:
  - pack:deny-all
  - pack:mcp-server-minimal
fs:
  allow:
    - "./data/input.txt"
  deny: []
net:
  allow: []
  deny:
    - "*:*"
env:
  allow:
    - "FOO_FEATURE"
processes:
  allow:
    - "/usr/bin/cat"
meta:
  counters:
    "sandbox.audit_fallback": 1
    "sandbox.env_strict_used": 1
  notes:
    - "audit_fallback: landlock policy conflict"