29f9069a331b5165d85d9f1e6025c43a48775a20
Writes from sessions that have read untrusted content go to the archive, labelled untrusted, and never reach the prompt. Every write is checked, announced in its thread, journalled and can be undone. Session-scoped approvals for other tools become an open decision. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Description
sovereign personal agent harness
4.8 MiB
Languages
Rust
97.6%
Shell
1.1%
Python
1.1%
Nix
0.2%