← Back to plugins
⌖
Guardrails · @molecule

Path Freeze

molecule/path-freeze
FREE

About

Declarative allowlist of paths the agent may read or write. Enforced at the syscall layer in the runtime, not in the agent prompt — the agent literally cannot see paths outside its allowlist.

Supported runtimes

claude-codeopenclawhermes

Permissions requested

  • ▸intercept:fs-syscalls

Changelog