Foundational Infrastructure
for AI Agents

1mounts:▸ 6
26runtimes:?The engines a line can run on. Both python engines are registered — monty and pyodide — and this entry says which one python and python3 bind to; quickjs takes node and js. All are sandboxed, so their file I/O only reaches the mounts above. The builtin command engine is always present, so it is not listed.
27  - { name:montypyodide, captures: [python, python3] }
28  - { name: quickjs, captures: [node, js] }
29  # Route to e2b sandbox if python script has NumPy, see route.py
30  - name: e2b?Runs python that needs more than a browser has. Connect a store and a key, then put the script and its data where both sides can reach them:$ cp /repo/stats.py /repo/prices.csv /redis/$ python3 /redis/stats.py
31    captures: [python, python3]
32    config: { apiKey:  }
33 
34route_policy: route.py?A different door: asked once per line, before anything runs, and answering who runs it rather than whether it may. A runtime name places the line, a deny refuses it. It outranks the runtimes above and yields to a runtime named on the call.
35 
36clis:+
37  simple:
38    script: simple.js?The program, run on the engine named beside it.
39runtime: quickjs
40 
41profiles:
42  admin:
43    commands:
44allow: [cd,pwd,ls,cat,echo,touch,mkdir,sed,cp,python3,python,history,whoami,man,open ]treeheadnodejs
45    policy:?A program the gate runs before every command this profile runs. It sees the command's context and reads the filesystem, and answers allow, ask or deny.
46      script: copy_redis.py?The program, run on the engine named beside it.
47runtime: monty
48 
49  user:
50    commands:
51allow: [cd,pwd,ls,cat,touch,python3,python,whoami,man,open,simple ]treeheadechomkdirsedhistorynodejscp
52    policy:?A program the gate runs before every command this profile runs. It sees the command's context and reads the filesystem, and answers allow, ask or deny.
53      script: ask_curl.py?The program, run on the engine named beside it.
54runtime: monty
55    mounts:
56      /tmp:
57        mode: read
58    paths:
59hide: [/secret,/github ]/repo/tmp/bin/redis/secret/aws.token