Expand description
Execution sandbox: write-guard install/teardown and write-boundary policy.
The hook entry points are hidden subcommands on this binary (see guard and
cli), so the installed PreToolUse hook invokes eval-magic guard <marker>
or eval-magic guard-codex <marker> — no separate hook script to ship or
locate.
Re-exports§
pub use decide::GuardDecision;pub use decide::GuardMarker;pub use decide::decide;pub use guard::codex_guard_decision;pub use guard::guard_decision;pub use guard::read_marker;pub use install::GUARD_MANIFEST;pub use install::GUARD_MARKER;pub use install::install_guard;pub use install::teardown_guard;pub use policy::WRITE_TOOLS;pub use policy::classify_bash;pub use policy::is_under;pub use policy::is_under_any;pub use policy::is_write_tool;pub use policy::path_arg;