From 291a16d8a1da2b81c8062e26811aa57ff13260ca Mon Sep 17 00:00:00 2001 From: Ty Date: Mon, 27 Jul 2026 16:09:31 +0000 Subject: [PATCH] structure: sync policy/openshell/README.md --- policy/openshell/README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 policy/openshell/README.md diff --git a/policy/openshell/README.md b/policy/openshell/README.md new file mode 100644 index 0000000..071d151 --- /dev/null +++ b/policy/openshell/README.md @@ -0,0 +1,14 @@ +# OpenShell policy (scaffold) + +**Status:** Structure only — no live policy applied until **build**. + +## Intended contents + +| Path | Purpose | +|------|---------| +| `policy.yaml` (or equivalent) | Deny-by-default base for salon egress | +| `overlays/` | Per-integration allowlists (Square MCP host, QBO local, channels, etc.) | + +Apply via platform CLIs only: `openshell policy set`, `nemohermes policy-add` / `policy-remove`. + +See [design/mcp-integrations.md](../../design/mcp-integrations.md) and [docs/POLICY.md](../../docs/POLICY.md).