Workspace Specifications
Directory scoping, workspace variables, and virtual environment rules inside Niyatna OS.
A Workspace is the secure runtime directory generated for an intent execution.
It encapsulates the target source codes, directories, and variables to ensure that one agent task does not bleed into another.
Workspace Directory Scoping
When Niyatna OS mounts a sandbox workspace, it configures:
- Target Scope: Pointers to the specific git branch and working path.
- Whitelisted Directories: Absolute paths the agent is permitted to read or edit.
- Secrets Directory: Location of scoped credential tokens injected by LocalRoute.
- Checkers Registry: Pointers to unit tests and compilers required to generate proof files.
Workspace Security Contract
- Read Lockdown: Prevents agents from accessing directories outside the whitelist (e.g., system
/etc, other project workspaces). - No Direct Pushes: Git push commands are disabled inside the sandbox; changes are staged as patches for Niyatna HQ approval.
- Process Termination: The container processes are killed and scrubbed once verification completes.