Node / ReticulumProjects / MeshChatX.git / files / AGENTS.md

Displaying Raw • View rendered • Download

Tc9d1d9# MeshChatX agent entry

Start at [Tff7b72docs/agents/README.md](Te6edf3docs/agents/README.md).

For architecture and invariants, read [Tff7b72docs/agents/overview.md](Te6edf3docs/agents/overview.md).

For mesh design, read [Tff7b72docs/agents/conventions/reticulum-zen.md](Te6edf3docs/agents/conventions/reticulum-zen.md).

Tc9d1d9## Linux Landlock (quick)

MeshChatX applies an optional filesystem sandbox on Linux (Ta5d6ff`MESHCHAT_LANDLOCK`, see overview). Besides SQLite Ta5d6ff`temp_store`, it affects **subprocesses** and **user-local tools** (pipx Argos Translate, Ta5d6ff`~/.local/bin` wrappers, rnsh/rnx when launched as PATH scripts).

Tff7b72- Implementation: Ta5d6ff`meshchatx/src/backend/landlock_sandbox.py`

Tff7b72- SQLite symptoms and pragmas: [Tff7b72docs/agents/skills/landlock-sqlite/SKILL.md](Te6edf3docs/agents/skills/landlock-sqlite/SKILL.md)

Tff7b72- Integration probes (subprocess spawn, translator Argos, home write denial): Ta5d6ff`tests/backend/test_landlock_integration_surfaces.py` and Ta5d6ff`tests/backend/landlock_integration_support.py`

Tff7b72- After changing Landlock rules or any code that Ta5d6ff`subprocess`/Ta5d6ff`Popen`s external binaries, extend read/RW roots and add a probe test in that integration file.