DEVELOPER GUIDE · 060 / 290

PackLock runtime permissions

PackLock denies networking, arbitrary filesystem access and host command execution to native PackLang programs.

Reference / verify against active installation

Overview & behavior

PackLock denies networking, arbitrary filesystem access and host command execution to native PackLang programs.

Always treat imported package names and UI labels as untrusted until verified against the execution contract.

Integration: AEGIS runs ahead of the loopback PackCDN origin, with independent policy enforcement.

Validation checklist: confirm prerequisites, execute the smallest working example, test error handling, inspect expected output and preserve the last working release.

INTERACTIVE EXAMPLE LABPackLang / Preview
main.PL · editable sample
LIVE CONCEPT PREVIEW
OPERATIONS GUIDE

PackLock runtime permissions

This command sample is intentionally not executed in your browser.

Browser demonstration only. Editing source changes preview labels; execution and security behavior require the real native PVM or AEGIS gateway.

Practical verification

  • Use the actual native compiler, validator or gateway to confirm behavior.
  • Check the installed version and execution contract before publishing.
  • Review capabilities and failure states, including unsupported runtime operations.
  • Save immutable versioned bundles only after checking the output.