The rules library

Everything Agents Butler is allowed to touch is written down as a rule: a path pattern, a tier, and how it is judged. The library is open; the app is not.

View on GitHub
—host families
—rules
—forbidden paths
—rules version

Rules by host

…

Contribute a rule

01

Fork

Fork the rules repository on GitHub and open the YAML file for the host you know.

02

Edit YAML

Add a rule with a path pattern, a tier and a judge block. Never set a new rule to safe without a regenerable cache behind it.

03

Open a pull request

We review weekly. Accepted rules ship to every user with the next rules bundle, no app update required.

  - id: codex.command_runner_versions
    title: 沙箱 runner 旧版本
    path: "~/.codex/.sandbox-bin/codex-command-runner-*.exe"
    kind: file
    category: version
    tier: suggest
    action: quarantine
    judge:
      keep_latest: 2
      version_regex: "(\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.]+)?)"

The model proposes; it never decides

  1. 01The model only ever sees an anonymised fingerprint — never file contents.
  2. 02Its output caps at "suggested". It cannot produce a pre-checked "safe" item.
  3. 03Forbidden paths and the built-in blocklist are outside the model's reach entirely.