> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sigilcore.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Protect Your Repository

> Policy 2.1 repository profile that blocks unsafe writes and Git history changes, with legacy command and credential denials retained as defense in depth.

# Warranty Policy - Protect Your Repository

This warranty.md governs a coding agent that writes, tests, and ships code. Its Policy 2.1 repository profile requires a trusted execution shim and blocks writes outside the project root, Git-history changes, and sensitive-file effects. It retains the listed command strings and path patterns as defense in depth, holds outbound email for approval, and requires a known job type. It does not by itself attest child-process effects, filesystem race safety, or network activity.

```markdown theme={null}
version: 2.1.0

## repository
roots: .
block_outside_writes: true
protect_git_history: true
protect_sensitive_files: true
git_providers: generic, github
require_shim: true

## tool_calls
allowed: bash, web_fetch, file_write, email.send
bash.blocked_commands: rm -rf, rm -r /, mkfs, dd if=, shutdown, reboot
web_fetch.blocked_domains: evil.com, malware.io
file_write.blocked_paths: /etc, /root, /var, /usr, /sys, /proc, /boot, ~/.ssh, ~/.gnupg, ~/.aws
email.require_approval: true
email.allowed_recipients: *@sigilcore.com, maintainer@example.com
email.blocked_recipients: noreply@sigilcore.com

## custom
# Require every governed intent to declare the kind of coding work requested.
allow_only.intent.metadata.job_type: code_review, test_run, documentation
deny_if.intent.metadata.job_type contains test_payload

# Block git push to main/master without human approval
deny_if.intent.command contains "git push origin main"
deny_if.intent.command contains "git push origin master"
deny_if.intent.command contains "git push --force"

# Block destructive git operations
deny_if.intent.command contains "git reset --hard"
deny_if.intent.command contains "git clean -fd"

# Block credential exfiltration
deny_string: AWS_SECRET_ACCESS_KEY
deny_string: ANTHROPIC_API_KEY
deny_string: OPENAI_API_KEY
deny_string: GITHUB_TOKEN
deny_string: BEGIN RSA PRIVATE KEY
deny_string: BEGIN OPENSSH PRIVATE KEY

# Block writes outside the project directory
deny_if.intent.path starts_with "/etc"
deny_if.intent.path starts_with "/root"
deny_if.intent.path starts_with "/var"
deny_if.intent.path contains ".ssh"
deny_if.intent.path contains ".env"

## soft_limits
# Enforced across all governed tool calls: exceeding this limit returns DENIED;
# the day bucket resets at 00:00 UTC.
daily_tool_calls: 1000

## execution_limits
max_tool_calls_per_task: 50
require_shim: true

## signature
sigil-sig: REPLACE_WITH_OUTPUT_FROM_SIGNING_TOOL
```

This policy governs actions that reach Sigil enforcement. Review adapter coverage before relying on it. Shell command checks do not independently govern network activity started by a child process.