Feature 05 / 05

Configuration

One file, vinaya.config.json, sets it all up. An empty file is a full harness; add a key only to change what runs.

  • vinaya.config.json
  • All optional
  • Harness keys
  • Trust anchor
How it works

One file, reviewed like any other

What it never does

It declares.
It never runs code.

It selects and parameterizes what is installed. Reviewed like any other file, it is the audit trail.

  1. 01No code. It cannot load code, grant authority, or switch off a protection.
  2. 02No self-rewrite. A change cannot rewrite its own rules: sensitive keys come from the default branch.
  3. 03No silent loss. A removed key is refused loudly, naming the one that replaced it.

Start with an empty file

init writes a starter and records what it installed. Add a key only when you need it.

$ vinaya init$ vinaya doctor