Skip to content

Latest commit

 

History

History
41 lines (28 loc) · 1.2 KB

File metadata and controls

41 lines (28 loc) · 1.2 KB

AGENTS.md

suy-sideguy is a user-space runtime safety guard for agent processes.

Use it for

  • watching process, file, and network behavior after the agent starts running
  • enforcing policy verdicts such as SAFE, FLAG, HALT, and KILL
  • generating forensic evidence after suspicious or blocked activity

Do not use it for

  • kernel-level sandboxing
  • prompt injection detection on inbound input
  • assuming name-based process matching is safe enough for production targeting

Minimal commands

pip install -e ".[dev]"
suy-warden --scope examples/scope.low-disruption.yaml --agent-pid 12345 --poll 0.5
suy-forensic-report --last-hours 24
pytest -q

Output shape

  • the warden emits runtime verdicts and enforcement actions
  • forensic reporting reads stored incident artifacts and produces an incident-ready summary

Success means

  • the policy scope loads cleanly
  • the target process is identified correctly
  • runtime events are classified consistently and evidence is preserved

Common failure cases

  • using --agent-name when multiple matching processes exist
  • overly broad policies that create noisy early flags
  • expecting full OS visibility from psutil.open_files() on every platform