coding-agent-guardrails

Versions

Policy text

Version 2, registered 2026-09-05T21:45:35Z.

Content hash

5b659aa9…64a184 5b659aa967c131b00507ec25f80576efaf81178a8f1b35f2afb102ba2c64a184 copy

apiVersion: krynix.dev/v1
kind: Policy
metadata:
  name: coding-agent-guardrails
  version: "2"
  description: Guardrails for a coding agent on a developer workstation.
spec:
  scope:
    agents: ["*"]
    event_types: [tool_call]
  rules:
    - id: no-recursive-delete
      description: Recursive force-delete is never allowed from an agent.
      match:
        event_type: tool_call
        payload:
          - field: arguments.command
            operator: contains
            value: "rm -rf"
      action: deny
      message: Recursive force-delete is not permitted.
      severity: critical
    - id: no-env-file-reads
      description: Secrets files must not be read by the agent.
      match:
        event_type: tool_call
        payload:
          - field: arguments.file_path
            operator: contains
            value: ".env"
      action: deny
      message: Reading .env is not permitted.
      severity: error
  defaults:
    unmatched_action: allow

What changed

Only one version of this policy is registered, so there is nothing to compare it against.

Change audit

An archive row records that a version stopped deciding; its text is still readable by name and version. A delete row predates archiving: that version’s text did not survive, so the row is the only remaining evidence it existed.