English documentation · runtime 7.24.4 · SDK 2.6.7. Content is maintained with runtime development; see each guide's scope and review date.
Isolation policy packs
Status: Active Scope: public, current-state Last reviewed: 2026-07-19 Owner: AX Code runtime
JSON policy examples for project-local permission / isolation posture. Copy into .ax-code/policy.json or merge rules into agent permissions as appropriate for your team.
| Pack | Intent |
|---|---|
read-only-audit.json |
Audit / review sessions — no mutations |
restricted-write.json |
Workspace writes only, tight bash |
no-bash.json |
File tools only — no shell |
protect-secrets.json |
Extra protection around secrets paths |
file-scope-limit.json |
Limit agent to a file scope |
workspace-verify.json |
Prefer verification-heavy autonomous work |
See also: Sandbox Mode, Hooks, Autonomous Mode.