Overview
Airlock is the command firewall between cloud-queued tasks and local execution.
Implementation source:
src-tauri/src/services/airlock.rssrc-tauri/src/services/skill_executor.rs
Airlock levels
Timeout behavior
- Sensitive requests time out after
10 seconds.
- Dangerous requests time out after
30 seconds.
- Timeout defaults to deny.
Headless mode behavior
- Safe: always auto-approved.
- Sensitive: can auto-approve in headless mode.
- Dangerous: never bypassed by headless mode.
- Safe:
read_file, list_files, search_files, web_search, read_web_page, screenshot
- Sensitive:
write_file, mkdir, browse_url, click_element
- Dangerous:
execute_command, delete_file, move_file
Keep dangerous commands behind explicit approval in production workspaces.
