Policy packs

Compose the gate

Extend packs in mayrun.policy.yaml. Fail closed. List locally with mayrun policy packs.

• shell-basics

  Shared ls/pwd/cat/rg and mayrun allows for everyday agent shells.

  allow inspect

• dangerous-defaults

  Destructive shell, disk, force-push, sudo, rc writes, curl|sh — mostly deny.

  mostly deny

• secrets-safe

  Deny credential-path exfil; require approval for project .env reads.

  deny exfil / approve .env

• network-exfil

  IMDS, pipe-to-shell, and obvious secret egress — deny.

  deny

• mcp-safe

  MCP tool matchers for mcp-proxy — deny sensitive write, approve shell tools, allow read.

  mixed

• exec-escapes

  GTFOBins-style escapes — require approval, not blanket deny.

  require approval

• git-safe

  Allow git reads; require approval for push, commit, and reset --hard.

  allow read / approve write

• rust-dev

  Local cargo tooling without network publish/install by default.

  allow local / approve publish

• node-dev

  Local npm/pnpm/yarn/bun scripts without publish by default.

  allow local / approve publish

• ops-approve

  terraform apply, kubectl apply, docker push — require approval.

  require approval

• read-only

  Plan-mode inspection allowlist — look, don’t mutate.

  allow inspect

• python-dev

  Local pytest/ruff/mypy without pip install or twine publish by default.

  allow local / approve publish

• go-dev

  Local go test/build/run without go get/install by default.

  allow local / approve install

• java-dev

  Maven/Gradle local build/test without deploy/publish by default.

  allow local / approve publish

• dotnet-dev

  dotnet build/test without nuget push or package add by default.

  allow local / approve publish

• cpp-dev

  cmake/ninja/make/compilers without apt/brew/vcpkg install by default.

  allow local / approve install

• php-dev

  phpunit and composer validate without require/publish by default.

  allow local / approve install

• ruby-dev

  rspec/rake/rubocop without gem push or bundle install by default.

  allow local / approve install

• kotlin-dev

  Gradle Kotlin/Android local build without publish by default.

  allow local / approve publish

Policy language