Hub rules-free-subscription

rules-free-subscription

v1 public Verified

Free-subscription

This ruleset provides basic protection against common developer 'footguns' and resource exhaustion for users on the free tier. These rules govern system safety, preventing accidental halts, freezes, or runaway processes.

@sigmashakeinc 2 pulls 20 rules published Apr 8, 2026 synced Oct 11, 2026 sigmashakeinc/rules/rulesets/rules-free-subscription →
Severity
17 error 3 warn 0 info
demo.cast
This ruleset provides basic protection against common developer 'footguns' and resource exhaustion for users on the free tier. These rules govern system safety, preventing accidental halts, freezes, or runaway processes.

Rules index

20 governance rules

Indexed from the repository's .rules files, grouped by technology. Expand any rule to read the raw source.

fs

block-chmod-777-recursive error block

Free Protection: Recursive wide-open permission changes are blocked to prevent breaking system security.

Rule source requires an active Pro or Enterprise subscription.
block-process-nuke error block

Free Protection: Mass process termination commands are blocked.

Rule source requires an active Pro or Enterprise subscription.

git

block-git-force-push error block

Free Protection: Force pushing is blocked to prevent accidental overwriting of remote branches.

Rule source requires an active Pro or Enterprise subscription.
block-git-hard-reset-root error block

Free Protection: Deep hard resets are blocked to prevent massive local data loss.

Rule source requires an active Pro or Enterprise subscription.

linux

block-chown-nobody-root error block

Free Protection: Recursive ownership changes to nobody on root paths are blocked.

Rule source requires an active Pro or Enterprise subscription.
block-crontab-remove error block

Free Protection: Removing the entire crontab is blocked to prevent accidental loss of scheduled tasks.

Rule source requires an active Pro or Enterprise subscription.
block-mkfs-formatting error block

Free Protection: Formatting block devices using mkfs is blocked.

Rule source requires an active Pro or Enterprise subscription.

macos

block-macos-erase-disk error block

Free Protection: Erasing disks via diskutil is blocked to prevent data loss.

Rule source requires an active Pro or Enterprise subscription.
block-macos-open-applications error block

Free Protection: Opening all applications simultaneously is blocked to prevent system freeze.

Rule source requires an active Pro or Enterprise subscription.

npm

require-ignore-scripts-npm-ci warning ask

Free Protection: 'npm ci' without '--ignore-scripts' can execute malicious postinstall hooks.

Rule source requires an active Pro or Enterprise subscription.
require-ignore-scripts-npm-install warning ask

Free Protection: 'npm install' without '--ignore-scripts' can execute malicious postinstall hooks.

Rule source requires an active Pro or Enterprise subscription.

os

block-fork-bomb error block

Free Protection: Known fork-bomb patterns are blocked to prevent system freeze.

Rule source requires an active Pro or Enterprise subscription.
block-system-shutdown error block

Free Protection: System shutdown and reboot commands are blocked to prevent AI agents from halting the host machine.

Rule source requires an active Pro or Enterprise subscription.
prevent-input-disable error block

Free Protection: Disabling input devices is blocked to prevent system lockout.

Rule source requires an active Pro or Enterprise subscription.
prevent-oom-resource-exhaustion error block

Free Protection: Resource exhaustion commands that could cause OOM (Out Of Memory) are blocked.

Rule source requires an active Pro or Enterprise subscription.

pwsh

block-pwsh-iex error block

Free Protection: Invoke-Expression (IEX) is blocked to prevent execution of arbitrary or malicious strings.

Rule source requires an active Pro or Enterprise subscription.
block-pwsh-registry-remove error block

Free Protection: Destructive commands targeting Windows Registry drives are blocked.

Rule source requires an active Pro or Enterprise subscription.
block-pwsh-remove-item-root error block

Free Protection: Highly destructive Remove-Item commands targeting drive roots are blocked.

Rule source requires an active Pro or Enterprise subscription.

systemd

block-systemctl-kexec-emergency error block

Free Protection: systemctl kexec, emergency, and rescue modes are blocked to prevent system lockouts.

Rule source requires an active Pro or Enterprise subscription.
block-systemctl-mask warning ask

Free Protection: Masking systemd services can lead to hard-to-diagnose boot issues.

Rule source requires an active Pro or Enterprise subscription.

Version metadata

Published metadata

The hash-locked record of this published ruleset. When source contents change, the maintainer resyncs and the version bumps.

Version
v1
Published
Apr 8, 2026
Source commits
0
Synced
Oct 11, 2026
Hash
6171cef11ad31adea4063e205a02bb878ea9643f46e83ac4add9d7ec7477a848
Signature
Verified (publisher key)
Tested with
claude-code@current
Plan
Starter (free)
Visibility
Public

Source history

Recent commits

Latest commits touching rulesets/rules-free-subscription/.sigmashake/rules in sigmashakeinc/rules/rulesets/rules-free-subscription. The published version only bumps when a maintainer resyncs.

No commit history available.