# `SuperPi.Harness.Planner`
[🔗](https://github.com/oleksandr/super-pi-beam/blob/v0.1.0/lib/super_pi/harness/planner.ex#L1)

Read-only planning harness (`super-pi-planner`).

Callers select it by name because read-only is a safety boundary, so it stays a harness of its
own. The boundary has three layers:

1. The tool loadout is `read`, `grep`, `find`, `ls` and `tool_search`.
2. `executionMode` is `plan` and `maxExecutionMode` is `plan`, so no flag can raise it.
3. `Permissions` confines file tools to the workspace and applies the deny list, and
   `ProtectedPaths` hides `.env`, `.git/` and private keys from `read`.

---

*Consult [api-reference.md](api-reference.md) for complete listing*