Sandbox Configs Guard policy configurations from the sibling WORKSPACE-GUARD repository. The guard tree is a soft dependency; configs appear here when available.
Binary Guard3 Git Guard8 Host Hardening3 Quality Gates8 Shared3 Shell Guard2
27 of 27 guard policies
Ambient capability grants for git-guard workloads in capability mode.
Binary Guard
ambient-allowlist.yaml Schema File
Exceptions to the banned-words scan.
Quality Gates
banned_words_exceptions.yaml Schema File
Full GTFOBins coverage rules for SUID/file-capability binaries, host-independent.
Binary Guard
binary_guard_policy_rules.yaml Schema File
Per-path file-capability allowlist restricted to system binaries.
Binary Guard
cap-allowlist.yaml Schema File
Test coverage thresholds enforced by the coverage no-devolution check.
Quality Gates
coverage_thresholds.yaml Schema File
Configuration for dead code detection (lib/checks_dead_code.sh).
Quality Gates
Dependencies excluded from dependency auditing.
Quality Gates
dependency_excludes.yaml Schema File
Dependencies intentionally declared in both workspace root and members, not flagged as redundant.
Quality Gates
duplicate_dependency_excludes.yaml Schema File
Maximum allowed lines per file enforced by the file-length check.
Quality Gates
file_length_limits.yaml Schema File
Exhaustive destructive-git attack surface derived from git.git source, used for coverage audits.
Git Guard
git_guard_attack_surface_matrix.yaml Schema File
Dangerous git config key glob patterns and sudo-gated keys blocked by the guard.
Git Guard
git_guard_config_keys.yaml Schema File
Dangerous git config key glob patterns and sudo-gated keys blocked by the guard.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Glob patterns for git config keys that are unconditionally blocked for all users. Patterns use * (single segment) and ** (multi-segment) wildcards.
Current: [HOVER TO SHOW VALUE]
Git config keys blocked for non-root users only (e.g. user.email, core.editor). Root users may set these.
Current: [HOVER TO SHOW VALUE]
Git config CLI options that consume the next argument as a value (used by the positional-key scanner to skip values).
Current: [HOVER TO SHOW VALUE]
Environment variable policy: allowed vars, sudo-gated vars, and blocked hook-bypass vars.
Git Guard
git_guard_environment.yaml Schema File
Environment variable policy: allowed vars, sudo-gated vars, and blocked hook-bypass vars.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Environment variables allowed through the sanitized execve env to real git (e.g. HOME, USER, LANG).
Current: [HOVER TO SHOW VALUE]
Git identity env vars gated to root. Non-root users have these dropped/ignored (e.g. GIT_AUTHOR_NAME, GIT_COMMITTER_EMAIL).
Current: [HOVER TO SHOW VALUE]
Git editor env vars gated to root. Non-root users have these dropped/ignored (e.g. EDITOR, GIT_EDITOR).
Current: [HOVER TO SHOW VALUE]
Hook-bypass env vars that are blocked when set to a non-empty value (e.g. SKIP, PRE_COMMIT_ALLOW_NO_CONFIG).
Current: [HOVER TO SHOW VALUE]
Table-driven expected outcomes for git-guard policy enforcement tests.
Git Guard
git_guard_policy_matrix.yaml Schema File
Table-driven expected outcomes for git-guard policy enforcement tests.
Schema version.
Current: [HOVER TO SHOW VALUE]
Policy test cases: argv vectors with expected block/allow outcome.
Current: [HOVER TO SHOW VALUE]
Stable case identifier for test output.
Full argv vector starting with 'git'.
Expected outcome: blocked or allowed.
Substring expected in block reason (blocked cases only).
When true, case runs only when guard detects sudo/AT_SECURE context.
Protected branch names and prefixes that require --ff-only/--rebase for pull and merge.
Git Guard
git_guard_protected_branches.yaml Schema File
Protected branch names and prefixes that require --ff-only/--rebase for pull and merge.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Branch names (case-insensitive) that require --ff-only or --rebase for pull/merge operations (e.g. main, master, develop).
Current: [HOVER TO SHOW VALUE]
Branch name prefixes (case-insensitive) that require --ff-only or --rebase for pull/merge operations (e.g. release/).
Current: [HOVER TO SHOW VALUE]
Resource limit thresholds and contract-check timing parameters.
Git Guard
git_guard_resource_limits.yaml Schema File
Resource limit thresholds and contract-check timing parameters.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Maximum number of open file descriptors (RLIMIT_NOFILE) for the guard and child git process.
Current: [HOVER TO SHOW VALUE]
Core dump limit (RLIMIT_CORE). 0 disables core dumps.
Current: [HOVER TO SHOW VALUE]
WORKSPACE-CI contract check kill timeout in milliseconds. The contract check child is SIGKILLed after this duration.
Current: [HOVER TO SHOW VALUE]
Contract check poll interval in milliseconds. The guard sleeps this long between waitpid(WNOHANG) retries.
Current: [HOVER TO SHOW VALUE]
Git subcommand policy: which subcommands are blocked, partially blocked, or require contract checks.
Git Guard
git_guard_subcommands.yaml Schema File
Git subcommand policy: which subcommands are blocked, partially blocked, or require contract checks.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Git subcommands unconditionally denied for all users (e.g. reset, clean, update-ref plumbing).
Current: [HOVER TO SHOW VALUE]
Git subcommands denied for non-root, allowed in sudo/AT_SECURE context (e.g. checkout, switch, submodule).
Current: [HOVER TO SHOW VALUE]
Git subcommands subject to conditional/flag-based blocking (e.g. push with --force, stash drop).
Current: [HOVER TO SHOW VALUE]
Git subcommands that must pass WORKSPACE-CI quality gates before execution (e.g. commit, push).
Current: [HOVER TO SHOW VALUE]
SSH destinations the git-ssh-wrapper may connect to; everything else is refused.
Git Guard
git_ssh_allowlist.yaml Schema File
Fleet UNIX users provisioned with per-user git identity and SSH keys. Live file config/home-lock-users.yaml is gitignored; commit home-lock-users.yaml.example only.
Host Hardening
home-lock-users.yaml Schema File
Fleet UNIX users provisioned with per-user git identity and SSH keys. Live file config/home-lock-users.yaml is gitignored; commit home-lock-users.yaml.example only.
Current: [HOVER TO SHOW VALUE]
Login users that receive root-provisioned identity and SSH material.
Current: [HOVER TO SHOW VALUE]
UNIX account name (must exist in /etc/passwd before provision).
git user.name injected by the guard for this account.
git user.email injected by the guard for this account.
Host bootstrap: admin break-glass, fleet sudo audit, guard stack. Live file config/host-provision.yaml is gitignored; commit host-provision.yaml.example only.
Host Hardening
host-provision.yaml Schema File
Host bootstrap: admin break-glass, fleet sudo audit, guard stack. Live file config/host-provision.yaml is gitignored; commit host-provision.yaml.example only.
Current: [HOVER TO SHOW VALUE]
Current: [HOVER TO SHOW VALUE]
When false, skip admin/sudo phases; install-guard-host-exec gate disabled.
Current: [HOVER TO SHOW VALUE]
Current: [HOVER TO SHOW VALUE]
Current: [HOVER TO SHOW VALUE]
Safe exceptions to the sensitive-files commit block.
Quality Gates
sensitive_files_exceptions.yaml Schema File
Hostname to git deployment class mapping; install targets assert the host before mutating the system.
Shared
shared_host_profiles.yaml Schema File
Locked path policy: which files and directory trees the guard locks to root:root in capability mode.
Shared
shared_locked_paths.yaml Schema File
Locked path policy: which files and directory trees the guard locks to root:root in capability mode.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Paths (relative to repo root) whose entire directory tree is locked recursively. Directories → 0o755, regular files → 0o644, hook files under hooks/ → 0o755.
Current: [HOVER TO SHOW VALUE]
Directory-name glob patterns. Every directory in the repo tree whose name matches the glob is recursively locked. Dirs → 0o755, files → 0o644.
Current: [HOVER TO SHOW VALUE]
Individual file paths (relative to repo root) to lock with an explicit octal mode. Key = relative path, value = octal mode (e.g. 0o644).
Current: [HOVER TO SHOW VALUE]
Filename-only glob patterns. Every file in the repo tree whose name matches the pattern is locked with the given octal mode. Key = glob pattern, value = octal mode (e.g. 0o644).
Current: [HOVER TO SHOW VALUE]
Absolute paths (with an optional leading ~ for the current user $HOME, or a literal /root/ path for root) of files OUTSIDE the repo tree that the home-lock program chowns to root:root and mode-sets. Covers ~/.gitconfig, ~/.config/git/config, ~/.gitconfig.local, ~/.ssh/authorized_keys, ~/.ssh/config, plus /root/ equivalents. Private id_* keys and shell rc files are deliberately NOT listed. Key = absolute or ~ -prefixed path, value = octal mode (e.g. 0o644 for gitconfig, 0o600 for authorized_keys).
Current: [HOVER TO SHOW VALUE]
Filesystem paths and path patterns used by the guard for logging, child PATH, scripts, and workspace detection.
Shared
shared_paths.yaml Schema File
Filesystem paths and path patterns used by the guard for logging, child PATH, scripts, and workspace detection.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Per-user block/warn log filename. Joined onto the user's $HOME directory.
Current: [HOVER TO SHOW VALUE]
PATH value passed to child git and bash processes. Centralized to eliminate duplication across call sites.
Current: [HOVER TO SHOW VALUE]
WORKSPACE-CI quality gate script path, relative to the workspace root.
Current: [HOVER TO SHOW VALUE]
Project enforcement YAML path, relative to the workspace root. Used for vendored-tier bypass detection.
Current: [HOVER TO SHOW VALUE]
Paths checked to identify the workspace root. All must exist for a directory to be recognized as the workspace root.
Current: [HOVER TO SHOW VALUE]
Shell-guard deny policy: a flat table of {id, regex, hint} patterns matched against raw command text.
Shell Guard
shell_guard_policy.yaml Schema File
Shell-guard deny policy: a flat table of {id, regex, hint} patterns matched against raw command text.
Schema version. Bumped when the YAML shape changes.
Current: [HOVER TO SHOW VALUE]
Ordered pattern table. The FIRST matching entry is the reported rule, so specific patterns precede bare command names they contain.
Current: [HOVER TO SHOW VALUE]
Stable rule identifier used in block messages, audit log lines, and the policy matrix (e.g. suppress-pipe).
Bytes-regex matched unanchored against the raw command text. Connector context is spelled in the pattern (e.g. a leading pipe). Must compile as a regex::bytes::Regex.
Remediation hint printed in the block message and audit log for this rule.
Expected block/allow outcomes consumed by the shell-guard policy matrix tests.
Shell Guard
shell_guard_policy_matrix.yaml Schema File
Exceptions to the error-swallowing pattern scan.
Quality Gates
silent_swallow_exceptions.yaml Schema File
System dependencies for WORKSPACE-GUARD, checked and installed by make init / make init-check.
Host Hardening
system-deps.yaml Schema File
