PROTECTED_FILE_NAMES

Shared event names and public type aliases. See the guide.

zett_agent.sandbox.policy.PROTECTED_FILE_NAMES: tuple[str, ...] = ('.bashrc', '.bash_profile', '.zshrc', '.zprofile', '.profile', '.gitconfig', '.gitmodules', '.ripgreprc', '.mcp.json')

Files that run code in a later, unsandboxed context (a login shell, git, an editor). They stay unwritable inside a writable directory, so a process that may write the workspace still cannot plant something the user runs next.