Launchfiles logoLaunchfiles

Planned — not available yet. Nothing on this page runs today.

TERMINAL AGENT GOVERNANCE · PRIVATE BETA

Bound Claude Code before it wanders the monorepo.

Turn open CLI sessions into work orders: allowed files, allowed commands, required checks, and a signed terminal receipt — you still approve before anything ships.

Private beta · No card required · No auto-approval of mutations

Open terminal session vs bounded workflow

Same Claude Code. Different blast radius.

Open CLI session

  • edits anywhere in monorepo
  • destructive commands possible
  • no proof of what ran
  • Merged on vibes

Work order workflow

  • file whitelist
  • command allowlist
  • diff containment + tests
  • signed terminal receipt
  • Ready for your approve

What a Claude Code work order locks

Four deterministic boundaries that prevent terminal agents from wandering.

1

CLI task contract

Target files and forbidden commands declared before the run.

2

Command whitelist

Only allowed shell actions can execute — unapproved binaries fail closed.

3

Diff containment

Guarantees that only declared files were touched during the session.

4

Terminal receipt

Signed cryptographic log of all commands, outputs, and exit codes.

ScopeDeclared files & commands
Claude Code runBounded sandbox run
VerifyContainment & gate tests
Your approveHuman merges with receipt

Nothing ships without a human.

Deterministic execution contract

Sample workflow contract: lf_claude_cli_31a4

Real YAML work order specifying allowed files, allowed commands, and forbidden shell actions.

claude_work_order.yaml
# Claude Code Work Order Contract
task_id: "claude_task_31a4"
agent: "Claude Code CLI"
file_whitelist:
  - "packages/capabilities/src/claudeRuntime.ts"
allowed_commands:
  - "npm test"
  - "npm run build"
forbidden_commands:
  - "rm -rf *"
  - "git push"
status: "BOUNDED_AND_VERIFIED"

Built for engineers running Claude Code CLI

Frequently asked questions about structuring and gating Claude Code terminal sessions.

How does Launchfiles enhance Claude Code workflows?
Launchfiles wraps Claude Code sessions with pre-scoped work orders, explicit forbidden file boundaries, and automated receipt generation, preventing Claude Code from modifying unintended files during autonomous refactors.
How do I import Launchfiles work orders into Claude Code?
You can export work orders as standard YAML or Markdown files and reference them directly in Claude Code CLI commands or pipe them into your task initialization context.
Does Launchfiles automatically execute destructive terminal commands or push code?
No. Launchfiles enforces a strict fail-closed command policy. Commands like destructive rm, unauthenticated curl, or unauthenticated git push are permanently blocked by policy. A human engineer always approves the final changes.

Terminal agent governance · private beta

Bound Claude Code before it wanders the monorepo.

Turn open CLI sessions into work orders: allowed files, allowed commands, required checks, and a signed terminal receipt — you still approve before anything ships.