vetto 0.2.8

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

[metadata]
name = "opencode"
description = "Safe read-only compatibility roots for OpenCode."

[filesystem]
allow_read = [
  "$HOME/.config/opencode",
  "$HOME/.local/share/opencode",
  "$HOME/.local/bin",
  "$AGENT/cache",
  "$AGENT/logs"
]

[display_only_deny]
paths = ["$AGENT/auth.json", "$AGENT/config.json"]