Reference/Commands
saphan discover
Is meant to inspect a workspace and propose a configuration for it.
Is meant to inspect a workspace and propose a configuration for it. ⚠ It is not built yet: in this release the command only reports that it is not implemented and exits with status 4.
Global options apply to every command — see Every command.
saphan deny-unix-exec
Runs a command under a filter that forbids it, and everything it starts, from creating Unix-domain sockets that could reach a daemon on the host.
saphan dispatch
Prepares work for an agent: on its own it renders an executor brief from a dispatch template and refuses the brief if it breaks any of the five dispatch rules.