ralon 0.1.4

Filesystem policy for AI coding agents: kernel-enforced write protection driven by an agent.lock file
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

//! Every platform without a backend of its own.
//!
//! Reached on the BSDs, illumos, and anything else Rust compiles for. Ralon
//! builds and its policy commands work; only `run` is unavailable — which it
//! says, rather than starting the agent unprotected.

use std::ffi::OsString;
use std::process::ExitCode;

use anyhow::Result;

use super::{Availability, Backend, Plan};

pub fn availability() -> Vec<(Backend, Availability)> {
    let reason = format!("no enforcement backend exists for {}", std::env::consts::OS);
    vec![
        (
            Backend::Mount,
            Availability::Unavailable {
                reason: reason.clone(),
            },
        ),
        (Backend::Landlock, Availability::Unavailable { reason }),
    ]
}

pub fn enforce_and_exec(_plan: &Plan, _command: &[OsString]) -> Result<ExitCode> {
    Err(anyhow::anyhow!(
        "there is no enforcement backend for {}, so nothing would be protected",
        std::env::consts::OS
    ))
}