ralon 0.1.0

Filesystem policy for AI coding agents: kernel-enforced write protection driven by an agent.lock file
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

# Agent Lock protects itself with the thing it builds.
#
#   .gitignore  → what Git should not track
#   agent.lock  → what AI-controlled processes cannot modify
#
# Patterns are relative to this file. `*` does not cross `/`, `**` does.
# A directory protects everything beneath it. agent.lock protects itself.

version: 1

protect:
  # The code that does the actual restricting. Changes here are review-only.
  - src/enforce/linux.rs
  - LICENSE
  - .github/workflows/**