{"path":"PREVIEW.md","size":2524,"locked":false,"binary":false,"truncated":false,"content":"# Preview: Agent Workspace Guard SDK\n\n> **In-process filesystem confinement and command-policy guardrails for autonomous coding agents, backed by a reproducible 120-test adversarial suite.**\n\n---\n\n### What Problem Does It Solve?\nAutonomous coding agents (powered by Claude, GPT, or local LLMs) execute tools that write files and run shell commands. Unrestricted agent execution risks directory traversal outside authorized workspaces, overwriting symlinks, exposing secrets (`.env`, `.ssh/id_rsa`, `.aws/credentials`), and executing destructive commands (`rm -rf /`, shell pipe redirection).\n\n### Target Buyer\n- **AI Agent Framework Developers** building autonomous coding agents.\n- **Enterprise DevSecOps Teams** deploying internal agentic developer assistants.\n- **AI IDE & Tooling Builders** requiring safe execution boundaries in Node.js.\n\n### Verified Capabilities & Test Evidence\n- **120 / 120 Automated Tests Passed (100% Pass Rate):**\n  - **30 Path Traversal Tests:** Blocks `../`, Windows backslashes `..\\..\\`, and mixed separator escapes.\n  - **20 Symlink Breakout Tests:** Rejects symlink traversal and symlink overwrite attacks via `O_NOFOLLOW` and `lstat`.\n  - **15 Multi-Dot Evasion Tests:** Defeats `.../`, `....//`, and non-canonical dot sequences.\n  - **20 Secret File Exfiltration Tests:** Blocks `.env`, `.git/config`, `id_rsa`, `.aws/credentials`, `.npmrc`, `.bashrc`.\n  - **15 Dangerous Command Tests:** Blocks `rm -rf`, `mkfs`, fork bombs, and system partition manipulation.\n  - **20 Shell Redirection Tests:** Blocks pipe chaining (`|`, `&&`, `;`) and output redirection (`>`, `<`).\n\n### Architecture Summary\n- In-process Node.js runtime containment library using `node:fs` and `node:path`.\n- Path canonicalization with prefix-boundary enforcement.\n- Regular-expression and token-based command policy engine.\n- Zero runtime dependencies outside the Node.js standard library.\n\n### Quickstart & Integration Effort\n- **Integration Time:** Under 5 minutes.\n- **Dependencies:** 0 runtime dependencies (Node.js >= 18).\n- **Test Command:** `node --test tests/adversarial-red-team.test.mjs tests/adversarial-security.test.mjs`\n\n### Limitations\n- In-process guardrail library inside the Node.js runtime; does not replace hardware virtualization (Docker/VMs) for untrusted native binaries.\n\n### Commercial License\n- **Genesis Commercial Source License 1.0:** Perpetual commercial integration rights into proprietary applications. Standalone raw-source resale prohibited.\n- **Founding Release Price:** $149 USD.\n"}