AGPL-3.0-or-later · forever.

the registers

The permit families.

Permits fence a run by family: exec for processes, fs for reads and writes, net for the wire, tools for the library, env for the names a child process inherits. Absent means the engine floor · present means default-deny. The teaching lives on /how/boundary; this root lists the rooms.

  • 5membersone room each
  • ratifiedthe clockre-proven at every push
  • /how/boundarythe teaching hubwhere the register is taught
  • language/permitsthe familythis root lists its rooms

the rooms

5 doors
  1. exact env names a child may see · never inherited, never a glob

  2. which commands may run · false kills the family

  3. read and write globs · the walk root is gated

  4. http allowlist · the SSRF floor stays on regardless

  5. which nika tools the file may invoke

The whole lens lives in the map. Read the spec →