fs_guard

Filesystem topology constraints. Limits access to safe paths and blocks sensitive locations.

What it mitigates

• Access to host credentials (~/.ssh, ~/.aws)
• Environment secret scraping (.env*)
• Reads/writes outside workspace scope

Recommended defaults

Minimal config

moduleConfig:
  fs_guard:
    allowedPaths:
      - "${workspace}"
      - "/tmp"
    blockedPaths:
      - "~/.ssh"
      - "~/.aws"
      - "/etc"
    blockedBasenames:
      - ".env"
      - ".env.local"
      - ".envrc"

Hardening tips

• Keep allowedPaths short and explicit.
• Prefer dedicated temp dirs over broad host access.
• Include platform-specific sensitive paths where relevant.

Related modules

• command_guard
• output_dlp