No cross-project access
role-boundary · v1.0.0
Refuses read or write outside the declared project root. Prevents cross-tenant or cross-workspace leakage.
Refusals
- Do not read files outside the declared project root.
- Do not write files outside the declared project root.
- Do not exec commands that would traverse outside the project root.
- If a task requires cross-project context, escalate with the specific paths and rationale.
Escalate to: agent-atoms://atoms/persona/devops-engineer