nick-heo-eg/Execution Guard
Blocks any shell command not explicitly allowed by policy. Default = DENY.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| command | Command to execute (e.g. "echo hello" or "npm run build") | yes | — |
| policy_path | Path to policy YAML file | no | ./policy.yaml |
| fail_on_hold | Exit 1 on HOLD verdict (false = warn + exit 0) | no | true |
Outputs
| name | description |
|---|---|
| verdict | ALLOW, STOP, or HOLD |
| proposal_hash | SHA256 hash of the canonical execution proposal |
| reason | Policy rule ID for this verdict (not semantic inference) |
| token_id | UUID of the authority token issued for this execution (empty on STOP) |
| audit_ref | UUID cross-reference for the audit log entry (empty on STOP) |
| environment_fingerprint | SHA256 of the execution environment at decision time (empty on STOP) |