Configuration
Understand the workspace, permission, resource, and network concepts that shape a Jio deployment.
Jio configuration describes where tools operate and which actions they may perform. Keep policy explicit, reviewable, and close to the deployment it controls.
Illustrative schema
The keys below communicate policy concepts. Adapt them to the configuration interface and version used by your Jio build.
# Illustrative policy shape — adapt keys to your Jio build.
workspace:
host: workspace.example.com
path: /srv/jio/projects/demo
permissions:
read: true
write: true
execute: ask
resources:
cpu: 2
memory: 4Gi
timeout: 15m
network:
mode: restrictedWorkspace concepts
| Concept | Purpose | Guidance |
|---|---|---|
| Host | Selects the remote machine or service | Use a stable internal identity, not an unverified address |
| Path | Defines the filesystem boundary | Resolve to one explicit absolute root |
| Workspace name | Gives the bridge a stable target | Keep names unique within an operator scope |
| Lifecycle | Controls persistence | Match retention to the trust level of the task |
Permission and limit concepts
| Concept | Typical values | Guidance |
|---|---|---|
| Read | allow, deny | Usually required; still constrain the root |
| Write | allow, ask, deny | Ask or deny for sensitive workspaces |
| Execute | allow, ask, deny | Prefer approval until commands are well understood |
| CPU and memory | numeric limits | Apply at the operating-system or runtime level |
| Timeout | duration | Bound both commands and idle sessions |
| Network | deny, restricted, allow | Start restricted and document exceptions |
Policy precedence
When local approval rules and remote enforcement differ, the stricter rule should win. The remote service must never assume that a local client has already authorized a request.
Validate changes
After editing policy, repeat four checks: an allowed read, an allowed write or command, a denied out-of-root operation, and a denied network or resource action. Record the effective configuration alongside the results.