Documentation

Find the right starting point

Start with the workflow, then follow the model down to its executable format.

Getting started

QuickstartGo from a task you want to confine to a reviewed policy and an enforced Warden run.Playground guideUnderstand the interactive examples, compile a policy locally and interpret every result.

Learn the model

ConceptsThe mental model behind manifests, canonical decisions, host plans and enforcement.JSON manifestThe complete human-facing language for filesystem, network and process boundaries.

Use the tools

CLI referenceEvery maelys-policy command, argument, output, exit status and common workflow.C APICompile, build, verify and resolve portable sandbox decisions directly in a native host.

Under the hood

ArchitectureHow readable security rules become one portable decision that Warden can enforce without weakening it.SandboxPlanHow a portable policy is matched to real host capabilities before a workload is allowed to run.Warden integrationHow Warden applies the same portable policy to real workloads without coupling the two products.MIR binary formatThe canonical byte-level policy contract, its limits, ordering and SHA-256 identity.

Trust and release

Security modelTrust boundaries, guarantees, non-goals and fail-closed behavior from source to enforcement.ReleasesInstall Sandbox Policy and verify every published package before trusting it.