Agent writes confined to workspace

fs-safety-invariant:no-writes-outside-workspace

FilesystemSafetyInvariantsecurity/fs-safety-invariants/fs-safety-invariants-canonical.yaml·Open in Graph →

Attributes

displayName

Agent writes confined to workspace

rule

Agent subprocess must never write outside resolved workspace cwd.

scope

agent-session

enforcement

sandbox-policy

rationale

Symphony invariant: orchestrator host filesystem is off-limits.

None.

enforces_invariant1

agent-runtime-impl:claude-code.runtime@1.x·AgentRuntimeImplClaude Code Runtime (1.x)