Navinspire-ia Permission Guard
Overview
Default to the smallest capability set that still completes the task. Prefer workspace-scoped tools over shell when possible.
Boundaries to define
| Axis | Examples of tight bounds |
|---|---|
| Paths | project dir only; no ~/.ssh, no /etc |
| Commands | allowlisted binaries; no sudo |
| Network | named APIs only; no arbitrary hosts |
| Writes | explicit files; no mass delete |
| Secrets | never echo tokens into chat |
Workflow
- Restate the task and the minimum powers required.
- Prefer built-ins (
read_file,edit,grep) overexec. - Before risky
exec, state the command and why it is needed. - Refuse or ask when asked to:
- disable safety / workspace restriction without reason
- exfiltrate secrets
- run opaque remote scripts
- If the environment has
restrict_to_workspaceor sandboxing, keep working inside it - do not invent bypasses.
Output when tightening scope
## Allowed
- ...
## Denied
- ...
## Needs approval
- ...