cmd/

Command wardyn is the operator CLI for the Wardyn control plane.

Command wardyn-aws-sso is Wardyn's in-sandbox AWS SSO credential capture helper.

Command wardyn-git-helper is the git credential helper for Wardyn-governed agent sandboxes.

Command wardyn-proxy is the L2 per-workspace egress sidecar: an HTTP forward proxy that enforces Wardyn's default-deny domain allowlist, method rules, and first-use approval; streams decision logs to the control plane; and injects third-party credentials proxy-side so secrets never enter the sandbox.

Command wardyn-rec is Wardyn's per-workspace PTY session recorder.

Command wardyn-scan is Wardyn's in-sandbox workspace scanner.

Command wardyn-tetragon-ingest is the host-scoped eBPF GROUND-TRUTH sidecar: the SECOND of Wardyn's three advertised audit streams.

wardyn-toolgate is the in-sandbox relay that turns Claude Code's tool-use permission prompts into Wardyn approvals.

Command wardynd is the Wardyn control plane: REST API, embedded web UI, policy engine, approval FSM, token broker, and audit ingest.