assay-cli 3.35.0

Policy-as-code gate for MCP agent tool calls, with verifiable evidence and Linux kernel enforcement.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

# Generated by `assay sandbox --profile`
api_version: 1
extends: []
fs:
  allow:
    - "./data/input.txt"
  deny: []
net:
  allow: []
  deny:
    - "*:*"
env:
  allow:
    - "FOO_FEATURE"
processes:
  allow:
    - "/usr/bin/cat"
meta:
  counters:
    "sandbox.audit_fallback": 1
    "sandbox.env_strict_used": 1
  notes:
    - "audit_fallback: landlock policy conflict"