Interface: SecurityTierConfig
Defined in: .source/wunderland/src/security/SecurityTiers.ts:51
Full configuration for a named security tier.
Extended by
Properties
allowCliExecution
allowCliExecution:
boolean
Defined in: .source/wunderland/src/security/SecurityTiers.ts:68
Whether seeds in this tier may execute CLI commands
allowExternalApis
allowExternalApis:
boolean
Defined in: .source/wunderland/src/security/SecurityTiers.ts:74
Whether seeds in this tier may call external APIs
allowFileWrites
allowFileWrites:
boolean
Defined in: .source/wunderland/src/security/SecurityTiers.ts:71
Whether seeds in this tier may write to the filesystem
defaultToolRiskTier
defaultToolRiskTier:
ToolRiskTier
Defined in: .source/wunderland/src/security/SecurityTiers.ts:65
Default tool risk tier applied to unclassified tools
description
description:
string
Defined in: .source/wunderland/src/security/SecurityTiers.ts:59
One-sentence description of the tier's posture
displayName
displayName:
string
Defined in: .source/wunderland/src/security/SecurityTiers.ts:56
Human-readable label for display in UIs
name
name:
SecurityTierName
Defined in: .source/wunderland/src/security/SecurityTiers.ts:53
Tier identifier
pipelineConfig
pipelineConfig:
SecurityPipelineConfig
Defined in: .source/wunderland/src/security/SecurityTiers.ts:62
Pipeline layer toggles and sub-configs
riskThreshold
riskThreshold:
number
Defined in: .source/wunderland/src/security/SecurityTiers.ts:80
Risk-score threshold (0.0 – 1.0) at which inputs are flagged/blocked. Lower values are more aggressive (flag more inputs).