SuperPi.Harness.Planner (super_pi v0.1.0)

Copy Markdown View Source

Read-only planning harness (super-pi-planner).

Callers select it by name because read-only is a safety boundary, so it stays a harness of its own. The boundary has three layers:

  1. The tool loadout is read, grep, find, ls and tool_search.
  2. executionMode is plan and maxExecutionMode is plan, so no flag can raise it.
  3. Permissions confines file tools to the workspace and applies the deny list, and ProtectedPaths hides .env, .git/ and private keys from read.