Add CI check to enforce capability limits using capslock

Browse Source

Adds a capability baseline file and a GitHub Actions workflow that
uses Google's capslock tool to detect if any new capabilities (file
access, network, syscalls, etc.) are introduced by code changes.

https://claude.ai/code/session_01HwDXpKevFLhE5EfrR6JrBn

...

This commit is contained in:

Claude

2026-03-24 01:40:56 +00:00

parent 16b1ef5508

commit 478c2ff9d8

2 changed files with 1297 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

capability_baseline.json

+1272

File diff suppressed because it is too large Load Diff