Runtime Policies

Runtime policies set the rules for what may be installed, projected, or accessed inside a Spinup Agent's environment. The policy model covers network access, package install scope, and which skills or MCP servers an agent may use where the current runtime fulfillment path supports enforcement. Policies sit with the agent, not with the active runtime instance, and Spinup applies them when it provisions or reconciles the environment.

What ships today

The shipped policy surface covers:

• network policy: outbound network mode for the environment, such as allow_all, allowlist, or deny_all, with an explicit allow list when used.
• package install scope: whether install-backed capabilities are blocked, limited to curated installs, or allowed for declared package and remote-script plans before runtime fulfillment attempts them.
• skill and MCP allowance: which skills and MCP servers an agent is allowed to project, install, validate, or invoke through its capabilities where supported.

You set these through runtime policy and capability settings. Spinup stores them with the agent and projects the resulting constraints into the environment.

Package installation mode is declared by default, so new agents can install supported user-declared package and remote-script plans. Use curated to restrict installs to the small documented installer set Spinup recognizes, including Firecrawl CLI and the Loops HTTPS installer, or none to block install-backed capabilities before provisioning. Spinup-owned runtime tools such as ffmpeg are deterministic runtime-tool materializations from pinned Worker Host artifacts, not guest-side package installs, so they do not depend on package installation mode. Runtime policy denials are reported as setup failures with the denied capability and install strategy so the fix is to change the policy or remove the install-backed capability.

What is roadmap

More granular policy controls will arrive over time. Per-capability allow lists, signed policy versions, and policy review surfaces are not yet shipped and will be called out as they land.

Where to go next

• See where policies are enforced in Environments.
• See how capabilities sit under the same policy surface in Capabilities.