ward

WARD.md — Agent Security Policy Standard

The @weave_protocol/ward package provides the parser, validator, and runtime check primitives for WARD.md files — the standard for declaring AI agent security policies as version-controlled markdown.

When to use

• User has an agent (LangChain, MCP server, Antigravity, Claude Code, MDASH) and wants to lock down what it can/can't do
• User has AGENTS.md or SKILL.md files in their repo and needs to add security guardrails
• User asks "how do I prevent this agent from accessing X" or "how do I limit cost"
• User wants a portable, declarative security policy that survives across harness platforms
• User is reviewing an agent project and notices there's no declared policy

Commands

npx @weave_protocol/ward init             # Create a starter WARD.md (basic template)
npx @weave_protocol/ward init --strict    # Create a strict, default-deny WARD.md
npx @weave_protocol/ward validate WARD.md # Validate a file
npx @weave_protocol/ward explain WARD.md  # Human-readable policy summary
npx @weave_protocol/ward parse WARD.md    # Print parsed policy as JSON

Programmatic use

import { parseWard, checkFilesystem, checkNetwork, checkCapability } from "@weave_protocol/ward";

const policy = parseWard(wardSource);
const decision = checkFilesystem(policy, "read", path);
// decision.decision: "allow" | "deny" | "require_approval"

What a WARD.md contains

Section headings (H2) define the policy:

• ## Filesystem — read/write/execute/delete/list rules with glob patterns
• ## Network — outbound URL allowlist
• ## Capabilities — tools the agent may invoke (with approval gating)
• ## Data Boundaries — egress classifications (PII, PHI, credentials)
• ## Behavioral Limits — iterations, runtime, cost, tokens
• ## Multi-Agent — trust chain, isolation, semantic drift threshold
• ## Compliance — SOC2 / HIPAA / GDPR / etc.
• ## Verification — attestation backend, blockchain, frequency
• ## Threat Model — in-scope / out-of-scope threats
• ## Incident Response — what to do on violation