MountPolicy

MountPolicy = false | true | { paths: readonly string[]; }

Defined in: packages/runtime/src/container/types.ts:205

Mount policy — controls where (if anywhere) a container can mount/bind/unmount.

Remarks

• false — deny all mount operations (locked-down container)
• true — allow all mount operations (boot/dev mode)
• { paths: [...] } — allowlist: only paths matching a prefix are permitted