fatmo666/Caushell

README excerpt

Compiler-style pre-execution safety analysis for Harness shell actions. English 简体中文 Quick start · Configuration · What Caushell catches · Working with sandboxes · How it works Caushell (causal + shell) runs between a Harness and the local shell. Before a shell action reaches the local shell, Caushell performs pre-execution semantic analysis. Shell action → AST → command modeling → session execution graph → safety analysis → decision It preserves command structure, data flow and state changes across commands, and context such as paths, variables, working directory, and Git state. It also emits reviewable structured evidence for debugging, policy extension, and audit. What Caushell catches Caushell decides based on the actual impact a shell action can have on the local environment. It covers common risk classes such as: - Blocking catastrophic deletion or overwrite of critical targets such as system directories, disks, and partitions - Requiring approval when remote content flows into a shell or interpreter - Recognizing dangerous shell actions generated under the influence of untrusted context - Requiring approval for operations that can destroy the Git worktree, index, branches, o…

Category