Guided first use
Try kindling microVM protection
Reviews kindling's `kling` CLI (Firecracker/Virtualization.framework microVMs with a docker-style interface) and the `kling-db`, `kling-mcp` Follow the three steps below with your own setup — nothing on this page runs on your machine or changes a policy.
Step 1 · Check fit
What this coverage governs
Reviews kindling's `kling` CLI (Firecracker/Virtualization.framework microVMs with a docker-style interface) and the `kling-db`, `kling-mcp` and `kling-phone` extension binaries: credential and secret handoff and database copies at the strictest tier, removal and rollback of machines, volumes, templates and databases, provisioning of new machines, MCP services and extensions, and everyday command execution inside an existing machine. Read-only commands (ps, logs, inspect, top, status, doctor, version, machine audit, graph audit, db audit, the ls/inspect subcommands) match no rule here; kling is not on Guard's built-in safe-command list, so the unknown-executable review floor still applies to them. No safe variants are offered: kling answers -h/--help anywhere before `--` without running the command, but an environment variable kling reads can switch that interception off and a declarative matcher cannot see the inherited environment.
External — off until you opt in
This coverage stays off until you explicitly enable it from your Guard workspace controls. Reading this page never changes your policy; activation happens in Guard itself.
Harness support
No harness compatibility profile is published yet. Check the Guard harness guide for what your setup uses.
Are you the publisher? Complete this section in your Studio — until then this stays unknown for readers instead of being guessed.
Catalog version 1.0.0 · source snapshot e8a9bf391d
Step 2 · Set up
Install and activate
No reviewed setup steps are published for this coverage yet. Install Guard itself, then return here after the publisher publishes a guide — or ask for one. Are you the publisher? Complete this section in your Studio.
New to Guard? Start with Install Guard. Already installed? Skip install — this coverage stays off until you enable it from your workspace controls.
Activation happens in your Guard workspace. This page links to it; it never enables the coverage for you.
Missing the setup information you need? Request setup documentation — the publisher reviews requests before anything is published here.
Step 3 · Verify the result
Run a safe test and compare
Safe fixture inputs
No published safe fixture yet. Try the coverage against a harmless command of your own — not production traffic.
Are you the publisher? Complete this section in your Studio — until then this stays unknown for readers instead of being guessed.
Expected outcome
No expected outcome published yet. Guard surfaces what it matched — the rule and its decision — in its own activity view; compare that with this coverage’s stated rules to inspect the actual decision.
Are you the publisher? Complete this section in your Studio — until then this stays unknown for readers instead of being guessed.
Outcome reporting
This coverage has no claimed publisher page yet, so outcome reports are not collected. You can still verify the result locally against the expected outcome above.