ryk

name	ryk
description	Use when Pi tool calls are protected by ryk runtime guardrails or when a secret was captured from a Pi prompt.

ryk Guardrails for Pi

ryk evaluates Pi actions before they run:

Tool	Enforcement
bash	ryk evaluate --json --stdin
write / edit	ryk decide file with operation: write
read	ryk decide file with operation: read
grep / find / ls	Root preflight via ryk decide file
Other tool names	ryk decide tool name gate

A block is a security decision. Explain its redacted reason and rule id when available; never bypass it by rewriting, splitting, encoding, or indirectly executing the same action.

Use /ryk-doctor for integration health. Prefer repair over session bypass. For process-level environment, network, and secretless controls, launch Pi with:

ryk run -- pi
ryk run --secretless --network ask -- pi

Secret capture

Interactive Pi may ask for consent to store a pasted credential in the compatibility broker path .ryk/dev-secrets.env and replace the raw value with $ENV_NAME before the model sees it. Never ask the user to paste the raw secret again, and never print or log the value. Noninteractive capture fails closed.

Primary settings use the RYK_PI_ prefix. The hard-cut release accepts only the canonical RYK_* environment variables and ryk-* slash commands.