AJ NiPlexAdarsh Jaiswal

Home / Projects / NiPlex-Harness / Safety model / File protection

Pictures

File protection

File tools refuse core code folders, root files and secret data files. Both the written path and the resolved path are checked. Paths that escape the root count as protected.

Since 2 Sept 2026 · Updated 29 Oct 2026

Some files cannot be changed by the agent

Protected

Code folders (agent, gateway, security, sandbox, terminal, memory, tools and others), root files such as launch.py and config.py, .env, .git and secret or setting files under data.

Not covered

run_code and the shell can reach the filesystem directly. File protection covers the file tools only.

Tests

tests/test_file_protection.py and tests/test_deploy_lists.py.

See also:Threat model

Checked against the source at commit f4fd89f on 29 Oct 2026. Everything here is merged on the main branch; no release has been tagged yet. The source is private, so these pages are the public description.