vetto 0.2.21

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

//! Fail-closed platform gate for the native backends.
//!
//! Windows is supported through a target-gated backend.  Unsupported targets
//! still fail during build rather than producing a binary with an accidental
//! unsandboxed path.

fn main() {
    let target = std::env::var("TARGET").unwrap_or_default();
    if !target.contains("linux") && !target.contains("darwin") && !target.contains("windows") {
        panic!(
            "vetto builds only on Linux, macOS, and Windows. \
             Refusing to produce an unsandboxed or broken build for target {target}."
        );
    }
    println!("cargo:rerun-if-changed=build.rs");
    if let Ok(output) = std::process::Command::new("git")
        .args(["rev-parse", "HEAD"])
        .output()
    {
        if output.status.success() {
            if let Ok(hash) = String::from_utf8(output.stdout) {
                let hash = hash.trim();
                if !hash.is_empty() {
                    println!("cargo:rustc-env=VETTO_GIT_HASH={hash}");
                }
            }
        }
    }
}