BUNDLED SAMPLE / ISOLATED

Watch AWB block a sample outside write

The real awb demo command creates a temporary project, runs the barrier, and prints its receipt path.

awb demoENFORCED

$ awb demo
AWB demo — bundled sample in an isolated temporary directory
Agent task: update a timeout and remove an obsolete file.

BLOCKED  ../blocked-agent.conf            permission denied
MODIFIED src/config.rs                     sha256 changed
CREATED  target/config.pyc                 ignored file listed
DELETED  obsolete.txt                      deletion listed
CREATED  current-config                    symbolic link listed
MODIFIED .git/hooks/pre-commit             permissions changed

awb: ENFORCED · exit 0 · 7 persistent changes
Receipt: /tmp/agent-write-barrier-demo-…/write-receipt.json

This self-hosted recording is checked against the bundled CLI demo and sample files.

RECEIPT / SAMPLE DATA

Review what lasted after the run

The receipt records content, metadata, link targets, command details, and enforced mode.

Mode: enforced · Landlock ABI 3+
Allowed path: sample-project/
Watched path: sample-project/
Outside result: blocked-agent.conf unchanged

Start for real