Tech Stack
Security
seccomp-bpf syscall filtering, signed skills, and per-channel ACLs.
[security]
sign_skills = true
trusted_keys = ["~/.iris/keys/team.pub"]
seccomp_profile = "strict" # strict | default | off
egress_allowlist = ["api.openai.com", "*.github.com"]