cmd/

Command hallpass runs a command (typically an AI agent CLI) so that writes outside its project directory need the user's approval.

Command hallpass-node is the hallpass Kubernetes node agent (a DaemonSet): an NRI plugin that adds a seccomp profile to the containers of opted-in pods, the seccomp agent runc hands their listeners to, and one session API for all of them.