Interface: EnhancedSecurityTierConfig

Defined in: .source/wunderland/src/security/SecurityTiers.ts:119

Enhanced security tier configuration with granular permissions. Extends the base SecurityTierConfig with additional permission controls.

Extends

• SecurityTierConfig

Properties

allowCliExecution

allowCliExecution: boolean

Defined in: .source/wunderland/src/security/SecurityTiers.ts:68

Whether seeds in this tier may execute CLI commands

Inherited from

SecurityTierConfig.allowCliExecution

---

allowExternalApis

allowExternalApis: boolean

Defined in: .source/wunderland/src/security/SecurityTiers.ts:74

Whether seeds in this tier may call external APIs

Inherited from

SecurityTierConfig.allowExternalApis

---

allowFileRead

allowFileRead: boolean

Defined in: .source/wunderland/src/security/SecurityTiers.ts:121

Whether seeds may read from the filesystem (separate from write)

---

allowFileWrites

allowFileWrites: boolean

Defined in: .source/wunderland/src/security/SecurityTiers.ts:71

Whether seeds in this tier may write to the filesystem

Inherited from

SecurityTierConfig.allowFileWrites

---

allowFullAutonomous

allowFullAutonomous: boolean

Defined in: .source/wunderland/src/security/SecurityTiers.ts:124

Whether seeds may operate in full autonomous mode

---

defaultFolderPermissions?

optional defaultFolderPermissions?: FolderPermissionConfig

Defined in: .source/wunderland/src/security/SecurityTiers.ts:133

Default folder-level permissions for this security tier

---

defaultToolRiskTier

defaultToolRiskTier: ToolRiskTier

Defined in: .source/wunderland/src/security/SecurityTiers.ts:65

Default tool risk tier applied to unclassified tools

Inherited from

SecurityTierConfig.defaultToolRiskTier

---

description

description: string

Defined in: .source/wunderland/src/security/SecurityTiers.ts:59

One-sentence description of the tier's posture

Inherited from

SecurityTierConfig.description

---

displayName

displayName: string

Defined in: .source/wunderland/src/security/SecurityTiers.ts:56

Human-readable label for display in UIs

Inherited from

SecurityTierConfig.displayName

---

name

name: SecurityTierName

Defined in: .source/wunderland/src/security/SecurityTiers.ts:53

Tier identifier

Inherited from

SecurityTierConfig.name

---

permissions

permissions: GranularPermissions

Defined in: .source/wunderland/src/security/SecurityTiers.ts:130

Granular permissions broken down by category

---

permissionSet

permissionSet: PermissionSetName

Defined in: .source/wunderland/src/security/SecurityTiers.ts:127

Named permission set for declarative permission management

---

pipelineConfig

pipelineConfig: SecurityPipelineConfig

Defined in: .source/wunderland/src/security/SecurityTiers.ts:62

Pipeline layer toggles and sub-configs

Inherited from

SecurityTierConfig.pipelineConfig

---

riskThreshold

riskThreshold: number

Defined in: .source/wunderland/src/security/SecurityTiers.ts:80

Risk-score threshold (0.0 – 1.0) at which inputs are flagged/blocked. Lower values are more aggressive (flag more inputs).

Inherited from

SecurityTierConfig.riskThreshold