clash 0.5.1

Command Line Agent Safety Harness — permission policies for coding agents
Documentation
policy:
    tmpdir:
        fs:


    rust:
        default: deny
        exec:
            cargo:
                net:
                    domain:
                        github.com: allow
                        crates.io: allow
                fs:
                    subpath($CWD + "targets"): allow
                    subpath($TEMPDIR): allow

        tool: 
            read:
                subpath($CWD): allow
            write:
                subpath($CWD): allow