Schema Field Specification
The table below outlines all available specification fields, type definitions, and runtime behaviors:
Configuration Reference
Policy Schema Specification
Production JSON schema definition for Gaussian PolicyEngine v2 and MacFirewall sensor.
Policy Schema Location
Policy files are managed locally at
/Users/Shared/Gaussian/macfirewall_policy.json or pushed via enterprise MDM configuration profiles.Active local policy · Managed by MDMsnake_case
{
"blocked_domains": ["evil-exfil.example"],
"enforcement_mode": "monitor",
// Additional fields available during
// design partner onboarding
}Core Engine Posture4 Fields
| Field | Type | Behavior / Role |
|---|---|---|
| version | "v2" | Policy schema spec version |
| enforcement_mode | "monitor" | "enforce" | "strict" | Global enforcement mode across macOS Endpoint Security and Content Filter |
| behavioral_threshold | number (0-100) | Score threshold above which execution paths are quarantined |
| human_in_the_loop | boolean | Enables interactive approval prompts for unapproved execution flows |
MCP Server & Tool Rules4 Fields
| Field | Type | Behavior / Role |
|---|---|---|
| mcp_governance.allow_undeclared_servers | boolean | If false, undeclared stdio or SSE MCP servers are blocked inline |
| mcp_governance.servers[].name | string | Identifier matching mcp.json tool server name |
| mcp_governance.servers[].allowed_tools | string[] | Explicit tool names permitted for tool calls |
| mcp_governance.servers[].secret_redaction | boolean | Enables inline secret sanitization in JSON-RPC argument frames |
Agent Skill Governance3 Fields
| Field | Type | Behavior / Role |
|---|---|---|
| skill_governance.audit_on_discovery | boolean | Automated parsing of SKILL.md and scripts/ directory on disk mutation |
| skill_governance.block_untrusted_scripts | boolean | Blocks execution of unapproved scripts/*.py or scripts/*.sh in skill roots |
| skill_governance.disallowed_instruction_patterns | string[] | Regex or string match rules for prompt injection defense |
Network Egress & DLP3 Fields
| Field | Type | Behavior / Role |
|---|---|---|
| network_rules.blocked_domains | string[] | Domain suffix matches dropped at NetworkExtension layer |
| network_rules.allow_local_loopback | boolean | Permits local 127.0.0.1 / localhost IPC traffic |
| dlp_rules.redact_aws_keys | boolean | Intercepts AKIA... pattern credentials in stdout and network buffers |
Running AI agents on Mac at scale? We'll tune policy with you.
Design partners →