Reference
CLI reference
The command shape, policy sources, backend selection, streams and receipt outputs.General form
maelys-warden [WARDEN OPTIONS] -- PROGRAM [ARGUMENT ...]-- ends Warden option parsing. Everything after it is the workload argv. There is no legacy maelys-exec alias.
Policy source
Choose exactly one source:
| Option | Meaning |
|---|---|
--profile untrusted | built-in read-only workspace profile |
--profile project-rw | built-in writable workspace profile |
--policy-json FILE | compile strict source JSON in memory |
--plan FILE | load already-canonical MIR |
--emit-mir FILE may be combined with a profile or JSON source to persist the exact canonical result. Serialization is optional; the same compiler runs in memory.
Execution options
| Option | Purpose |
|---|---|
--workspace DIR | trusted symbolic workspace root |
--backend NAME | explicit advanced override; never a fallback |
--cwd DIR | working directory visible to the workload |
--env NAME=VALUE | explicit environment entry |
--receipt FILE | execution receipt JSON |
--network-receipts FILE | Netd connection receipts JSONL |
--network-frontend none|fd4|proxy | select the network delivery path |
Exit status
When the workload executes, Warden returns its exit code. A signal termination is represented using the platform CLI convention. Errors before workload readiness return a Warden failure and the command is never executed.
Examples
# Seatbelt on Apple Silicon or Bubblewrap on Linux; no ambient network.
maelys-warden --profile untrusted -- codex
# Writable project and arguments for the workload.
maelys-warden --profile project-rw -- npm test -- --runInBand
# Canonical MIR already reviewed offline.
maelys-warden --plan policy.mir --receipt run.json -- ./build/tool --check
# Unmodified HTTP client through the Netd frontend.
maelys-warden --policy-json github-mediated.json \
--network-frontend proxy -- curl https://github.com/