Skip to content

Commit bee0912

Browse files
committed
Add Agent Machine policy surface script
1 parent 9207f77 commit bee0912

1 file changed

Lines changed: 12 additions & 0 deletions

File tree

scripts/policy-surface

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
#!/usr/bin/env bash
2+
set -euo pipefail
3+
4+
echo "agent-machine policy surface"
5+
echo "filesystem: render_and_probe_only_until_activation_gates_land"
6+
echo "network: no_runtime_provider_listener_or_egress_until_declared"
7+
echo "execution: dry_run_render_and_evaluate_only_by_default"
8+
echo "approval: policy_admission_required_for_provider_activation_side_effects_teardown_and_wipe"
9+
echo "workspace_scope: declared_agentpod_workspace_or_none"
10+
11+
echo
12+
echo "blocking rule: update TRUST_SURFACE.yaml before provider activation, model serving, service installation, credential use, cache reuse, side effects, teardown, or wipe behavior lands"

0 commit comments

Comments
 (0)