@weave_protocol/ward 0.1.0

package/examples/strict.WARD.md

@@ -0,0 +1,127 @@
+---
+ward: "1.0"
+agent: production-deployer
+name: Strict Production Deployment Agent
+description: Locked-down policy for an agent that deploys code to production. Approval required for all elevated actions. Mandatory blockchain attestation.
+---
+
+# WARD.md
+
+Strict policy for a production deployment agent. Default-deny across the
+board. Any action that could affect production goes through human approval.
+Every action is cryptographically attested.
+
+## Filesystem
+
+allow:
+  - read: /workspace/build/**
+  - read: /workspace/config/**
+  - write: /workspace/logs/**
+deny:
+  - read: ~/.ssh/**
+  - read: ~/.aws/**
+  - read: ~/.kube/**
+  - write: /etc/**
+  - write: /usr/**
+  - execute: "**"
+  - delete: "**"
+default: deny
+
+## Network
+
+allow:
+  - url: "https://api.github.com/**"
+    methods: [GET]
+  - url: "https://registry.npmjs.org/**"
+    methods: [GET]
+default: deny
+
+## Capabilities
+
+allow:
+  - file_read
+  - file_write
+  - log_write
+requireApproval:
+  - deploy
+  - rollback
+  - http_request
+  - secrets_read
+deny:
+  - shell_exec
+  - ssh
+  - sudo
+  - kubectl
+  - terraform_apply
+default: deny
+
+## Data Boundaries
+
+egressAllow:
+  - public
+egressDeny:
+  - internal
+  - confidential
+  - secret
+  - pii
+  - phi
+  - pci
+  - credentials
+
+## Behavioral Limits
+
+maxIterations: 20
+maxRuntimeSeconds: 600
+maxCostUSD: 1.00
+maxTokens: 25000
+maxToolCalls: 15
+maxExternalServices: 2
+
+## Multi-Agent
+
+isolation: strict
+maxSemanticDrift: 0.2
+trustChain:
+  upstream:
+    - ci-orchestrator
+  downstream:
+    - notification-agent
+
+## Compliance
+
+frameworks:
+  - soc2
+  - iso27001
+backend: domere
+
+## Verification
+
+required: true
+backend: domere
+blockchain: solana
+frequency: every_action
+
+## Threat Model
+
+inScope:
+  - prompt_injection
+  - data_exfil
+  - credential_theft
+  - tool_misuse
+  - semantic_drift
+  - emergent_behavior
+  - supply_chain
+outOfScope:
+  - physical_attack
+  - side_channel
+
+## Incident Response
+
+onViolation:
+  - log
+  - alert
+  - terminate
+  - attest_violation
+  - notify_human
+  - block_further
+severityThreshold: low

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@weave_protocol/ward",
+  "version": "0.1.0",
+  "description": "WARD.md — the agent security policy standard. Define what your agents can and cannot do, version-controlled alongside AGENTS.md and SKILL.md.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "weave-ward": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "node --test tests/",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "weave-protocol",
+    "ward",
+    "agent-security",
+    "ai-security",
+    "ai-agents",
+    "infrastructure-as-code",
+    "policy",
+    "guardrails",
+    "agents-md",
+    "skill-md",
+    "antigravity",
+    "claude-code",
+    "mdash",
+    "harness",
+    "mcp",
+    "model-context-protocol"
+  ],
+  "author": "Trent Yoxall",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Tyox-all/Weave_Protocol.git",
+    "directory": "ward"
+  },
+  "homepage": "https://github.com/Tyox-all/Weave_Protocol/tree/main/ward#readme",
+  "bugs": {
+    "url": "https://github.com/Tyox-all/Weave_Protocol/issues"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.3.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist/",
+    "examples/",
+    "README.md",
+    "SPEC.md",
+    "SKILL.md",
+    "LICENSE"
+  ]
+}