blueclawBoundaries
| page | what it covers |
|---|---|
| POSIX identity | The POSIX identity is the Linux user and groups a person's tool calls run as, derived from the policy. |
| Workspace layout | The workspace is the directory tree under terminal.workspaceRootPath where people, circles and the service keep their files. |
| Command execution | Command execution is how a tool call becomes a process running as the requester. |
| What is not enforced | blueclaw has no executable allowlist, no denied command list, no denied path prefix, and no prompt instruction telling the model what it may not touch. |
| Capability authorization | Capability authorization is the per-person check on which capability operations a requester may invoke. |
| Known gaps | These are the places where the boundary above does not hold as stated. |
| Model-written wording | Model-written wording is the rule that every sentence a person reads from the agent comes from a model. |