ralon

agent.lock declares what AI agents may not modify. Ralon makes the kernel agree.

$ npm install -g ralonlock       # the command it installs is `ralon`
$ ralon init                     # write a starter agent.lock
$ ralon check src/auth.ts        # is this path protected? exits 1 if it is
$ ralon run -- claude            # run an agent that cannot touch them

Without installing: npx ralonlock check src/auth.ts.

Inside ralon run — and in every process it spawns — the protected paths are read-only to the kernel. Not a linter, not a hook the agent can talk its way past. open() returns EROFS, rm returns EACCES.

# agent.lock
version: 1

protect:
  - src/auth.ts
  - .env
  - config/**

This package ships prebuilt binaries and picks the right one for your platform. run enforces on Linux; init, check and status work everywhere, which is what CI and pre-commit hooks need.

Installing through npm adds a Node process in front of each invocation. For a long-running agent that is irrelevant, but cargo install ralon or the release binaries skip it.

Full documentation, the threat model and the tested limitations: https://github.com/stoneware-dev/Ralon

Apache-2.0.

Project links

Data verified by PyPI on Aug 24, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for ranjeetjena06 from gravatar.com ranjeetjena06

Credits

Author: Ralon contributors

GitHub Statistics

Data verified by PyPI on Aug 24, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Apache-2.0)

Requires

Python >=3.8

Tags

ai agent sandbox landlock security

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

ralonlock-0.1.3-py3-none-win_amd64.whl (746.1 kB view details)

Uploaded Python 3Windows x86-64

ralonlock-0.1.3-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl (927.6 kB view details)

Uploaded Python 3manylinux: glibc 2.17+ x86-64musllinux: musl 1.2+ x86-64

ralonlock-0.1.3-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl (836.0 kB view details)

Uploaded Python 3manylinux: glibc 2.17+ ARM64musllinux: musl 1.2+ ARM64

ralonlock-0.1.3-py3-none-macosx_11_0_arm64.whl (714.8 kB view details)

Uploaded Python 3macOS 11.0+ ARM64

ralonlock-0.1.3-py3-none-macosx_10_12_x86_64.whl (805.6 kB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file ralonlock-0.1.3-py3-none-win_amd64.whl.

File metadata

  • Download URL: ralonlock-0.1.3-py3-none-win_amd64.whl
  • Upload date:
  • Size: 746.1 kB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for ralonlock-0.1.3-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 fc3e860a3af29628cb1597a7620988b1cf630e7ac983153788bce7b22f7837a3
MD5 c754c7a5b8afc7900969322a7cb72a34
BLAKE2b-256 403a56986cc998d78dfb2d92e2add4c7b908db8171018ac08a7808da54e529c9

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.3-py3-none-win_amd64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.3-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.3-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 c3e862738a04155e1096f9458d7ac17f40e47a4e0c7822d21d8a6b6364753819
MD5 c849202c76d1ea823060cbf514b5c6e4
BLAKE2b-256 4b2dab546f844446114a80838e1b96f15aade896ae160cbcc6c6bc4e10278640

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.3-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.3-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.3-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 1eec88d9e7a04ec5bdf4301cfdcedf867709ee80ba6d1e0eb8564a09fa467dd2
MD5 071097408473399baaa53bec5d3f30aa
BLAKE2b-256 c737fc7ac8ea80c6a6be9edea968c5717ed760d30fa545372d81e95e0173148c

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.3-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.3-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.3-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 18548ec344d9ae1bb7a0a415b425612380edd1c8be198eed226e9123da9d9b7f
MD5 fcd52203571488bfb97f03b2b50875a2
BLAKE2b-256 5241a2dbee7b26fd924eb12afb806a6e53571573a719ba8bbd38e766ff27a916

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.3-py3-none-macosx_11_0_arm64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.3-py3-none-macosx_10_12_x86_64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.3-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 7df813dd82b079acded66d95623d38e2cffca50aa410a9d0e508440707fb4609
MD5 9d2e266b75bdd93b8c4e7510573f6dfc
BLAKE2b-256 6044f1e6d56133de3641996d82715a28044549d3fd622f5780e27d4e739973ef

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.3-py3-none-macosx_10_12_x86_64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.1.3 This release

5 files

0.1.2

5 files

0.1.1

5 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page