ralon

agent.lock declares what AI agents may not modify. Ralon makes the kernel agree.

$ npx ralon init                 # write a starter agent.lock
$ npx ralon check src/auth.ts    # is this path protected? exits 1 if it is
$ npx ralon run -- claude        # run an agent that cannot touch them

Inside ralon run — and in every process it spawns — the protected paths are read-only to the kernel. Not a linter, not a hook the agent can talk its way past. open() returns EROFS, rm returns EACCES.

# agent.lock
version: 1

protect:
  - src/auth.ts
  - .env
  - config/**

This package ships prebuilt binaries and picks the right one for your platform. run enforces on Linux; init, check and status work everywhere, which is what CI and pre-commit hooks need.

Installing through npm adds a Node process in front of each invocation. For a long-running agent that is irrelevant, but cargo install ralon or the release binaries skip it.

Full documentation, the threat model and the tested limitations: https://github.com/stoneware-dev/Ralon

Apache-2.0.

Project links

Data verified by PyPI on Aug 23, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.1.3)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for ranjeetjena06 from gravatar.com ranjeetjena06

Credits

Author: Ralon contributors

GitHub Statistics

Data verified by PyPI on Aug 23, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Apache-2.0)

Requires

Python >=3.8

Tags

ai agent sandbox landlock security

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

ralonlock-0.1.2-py3-none-win_amd64.whl (746.1 kB view details)

Uploaded Python 3Windows x86-64

ralonlock-0.1.2-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl (927.6 kB view details)

Uploaded Python 3manylinux: glibc 2.17+ x86-64musllinux: musl 1.2+ x86-64

ralonlock-0.1.2-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl (835.9 kB view details)

Uploaded Python 3manylinux: glibc 2.17+ ARM64musllinux: musl 1.2+ ARM64

ralonlock-0.1.2-py3-none-macosx_11_0_arm64.whl (714.9 kB view details)

Uploaded Python 3macOS 11.0+ ARM64

ralonlock-0.1.2-py3-none-macosx_10_12_x86_64.whl (805.8 kB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file ralonlock-0.1.2-py3-none-win_amd64.whl.

File metadata

  • Download URL: ralonlock-0.1.2-py3-none-win_amd64.whl
  • Upload date:
  • Size: 746.1 kB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for ralonlock-0.1.2-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 e827e6f2d434018115b730f7043e5cfa568e814c3ab0998e7ed866a6cb7253ee
MD5 29321c647c0576c5355d0a09cf53ac9e
BLAKE2b-256 3195e7c1f2a168c9a380acea6defa09e42ee0676e319d3f8d7e5c8f3d5359585

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.2-py3-none-win_amd64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.2-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.2-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 c9f2df76a70e1d97d9474db499a6cb69840db45bb7d05308c29ec8c137908e11
MD5 57b793032c8f3e44eeb4aa9f76b63d73
BLAKE2b-256 ce1d5b24cc8f74b116f85e54f3e225d8abf7c6a193d71156ade4d3e118c36750

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.2-py3-none-manylinux_2_17_x86_64.musllinux_1_2_x86_64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.2-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.2-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 640d922231d27831ea467c4e56f9b9a7baf4de156f114c46023eb45cf5efa173
MD5 631b77d4d92829e6113dac01b16f8976
BLAKE2b-256 a1bfb31973e41ae00d613b4e72b08028269f24e1b016004119dd0ed342986103

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.2-py3-none-manylinux_2_17_aarch64.musllinux_1_2_aarch64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.2-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.2-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 2f0edef798ebf0c9b7a639730e74e6f287e2134c207b9804048d56ce9c500fc9
MD5 4561c9dce6753e8efc2114bb45ae4fdb
BLAKE2b-256 35a0d7e5e6d74c049361725c425f39c915ceace20db980e3ff4778d79ff62d2f

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.2-py3-none-macosx_11_0_arm64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ralonlock-0.1.2-py3-none-macosx_10_12_x86_64.whl.

File metadata

File hashes

Hashes for ralonlock-0.1.2-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 5d87fc684682d90822889922dc2dcbbbe3d7135d50294a3ac66a60e8336b249f
MD5 cf07591cf2042169a7364f9c25079754
BLAKE2b-256 5e851d05511cfaa16ca16935b4519502d91cd462d86e189a205c8a06a1a10857

See more details on using hashes here.

Provenance

The following attestation bundles were made for ralonlock-0.1.2-py3-none-macosx_10_12_x86_64.whl:

Publisher: release.yml on stoneware-dev/Ralon

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.1.3

5 files

This release

0.1.2 This release

5 files

0.1.1

5 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page