An AgentRuntimeImpl (the v6 Harness-analog) enforces a FilesystemSafetyInvariant. catalog pass 23 risk-flagged: rationale also identified Sandbox and SafetyPolicy as candidate owners; single-source modeling may under-represent enforcement responsibility — extend in a future pass if needed.
| from | to | to kind |
|---|---|---|
| agent-runtime-impl:claude-code.runtime@1.x | fs-safety-invariant:no-writes-outside-workspace | FilesystemSafetyInvariant |
| agent-runtime-impl:claude-code.runtime@1.x | fs-safety-invariant:terminal-cleanup | FilesystemSafetyInvariant |
| agent-runtime-impl:claude-code.runtime@1.x | fs-safety-invariant:no-overlapping-worktrees | FilesystemSafetyInvariant |