Documentation
README
Config location: .workflow/config.json → guard section
{
"guard": {
"enabled": false,
"mode": "allow",
"paths": []
}
}
Enforcement: The workflow-guard hook (PreToolUse on Write/Edit) reads this config
and blocks operations targeting files outside boundaries. Requires hooks level >= full.
Output boundary: ALL file writes MUST target .workflow/config.json (guard section) only. NEVER modify hook files, .claude/settings.json, or source code.
This is the opening of the README. Read the full README on GitHub.