nordisk/nornir

crates/nornir-guard/src/lib.rs

//! # nornir-guard
//!
//! AI-agent guard rails — enforces the `[guard].forbidden` path list from
//! `nornir.toml` at the filesystem level (`chmod -w`) with a tamper-evident
//! sha256 manifest. A misbehaving agent trying to edit a protected file gets
//! `EACCES` rather than silently corrupting append-only history or generated
//! docs.
//!
//! Its only cross-crate coupling is the CLI result type, taken from
//! [`nornir_cli_outcome`]. nornir re-exports this as `nornir::guard` (via
//! `pub use nornir_guard as guard`), so every `crate::guard::…` call site
//! resolves unchanged.

mod guard;
pub use guard::*;

pub mod selftest;