Workspace Guardian Skill: operate within the sandbox

The Workspace Guardian is a security skill that keeps all Cerewro operations within the active working directory, prefers relative paths and raises warnings when an action would try to exit the defined workspace.

Guardian rules

  1. All file paths are relative to the active workspace
  2. Before writing to a path, verifies it's inside the workspace
  3. Warns if a command would try to access system folders (C:\Windows, C:\Program Files)
  4. Suggests moving the workspace if the operation requires another location
Guardian warning
WARNING: The specified path (C:\Windows\System32) is outside the active workspace (C:\gonzalo\my-project).
Do you confirm you want to operate outside the workspace? (yes/no)