Repository navigation
BehalfID CLI 0.2.16 adds scoped automatic protection for supported coding agents.
New activation scopes:
- Current session
- Limited duration
- Repository and all nested directories
- User-wide always-on protection
Supported launch integrations:
- Cursor
- Claude Code
- Codex
Security and policy behavior:
- Required organization and Managed Profile protection cannot be bypassed
- Repository containment uses canonical paths
- Symlink escape paths do not inherit protection
- Session environment variables cannot downgrade stronger scopes
- Noninteractive launches do not hang waiting for input
New commands include:
- behalf protection status
- behalf protection enable
- behalf protection list
- behalf protection reset
- behalf protection disable
See docs/CLI_PROTECTION_SCOPES.md for platform and repository behavior.