Derive runtime templates before setup validation so reruns preserve existing policy. Redact policy JSON by default to avoid exposing owner-local details.
873 B
873 B
Glove quickstart
This page is for local containment experiments. For build prerequisites and managed-session setup, use build.md and host-setup.md. Read threat-model.md before grading a local experiment into a security claim.
Build
cmake --preset dev
cmake --build --preset dev
ctest --preset dev
Contain an MCP client
./build/dev/src/glove run \
--upstream yams=yams,serve,--quiet \
--allow yams.mcp.echo \
-- ./build/dev/src/container/glove_synthetic_agent --mode=client
Contain a direct agent
mkdir -p /tmp/glove-work
./build/dev/src/glove exec \
--workspace /tmp/glove-work \
-- /absolute/path/to/agent --version
run and exec are explicit local containment surfaces. They do not make
remote Sage launch available, and direct Linux execution remains offline.