glove/docs/quickstart.md
trvon 22e7c2de50
fix(onboarding): harden setup plan
Derive runtime templates before setup validation so reruns preserve existing policy. Redact policy JSON by default to avoid exposing owner-local details.
2026-08-03 09:19:50 -04:00

873 B

Glove quickstart

This page is for local containment experiments. For build prerequisites and managed-session setup, use build.md and host-setup.md. Read threat-model.md before grading a local experiment into a security claim.

Build

cmake --preset dev
cmake --build --preset dev
ctest --preset dev

Contain an MCP client

./build/dev/src/glove run \
  --upstream yams=yams,serve,--quiet \
  --allow yams.mcp.echo \
  -- ./build/dev/src/container/glove_synthetic_agent --mode=client

Contain a direct agent

mkdir -p /tmp/glove-work
./build/dev/src/glove exec \
  --workspace /tmp/glove-work \
  -- /absolute/path/to/agent --version

run and exec are explicit local containment surfaces. They do not make remote Sage launch available, and direct Linux execution remains offline.