{"schema_version":1,"workflow_uuid":"2abdf176-481a-11f1-9bc6-00163e2b0d79","workflow_title":"Firezone — Self-Hosted WireGuard VPN with Zero Trust Access","page_url":"https://tokrepo.com/en/workflows/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","raw_url":"https://tokrepo.com/raw/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","metadata_url":"https://tokrepo.com/metadata/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176.json","install_plan_url":"https://api.tokrepo.com/api/v1/tokenboard/workflows/install-plan?uuid=2abdf176-481a-11f1-9bc6-00163e2b0d79&target=codex","agent_metadata":{"asset_kind":"skill","target_tools":["claude_code","codex","gemini_cli"],"install_mode":"single","entrypoint":"Firezone VPN","risk_profile":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":true},"dependencies":{"npm":[],"pip":[],"brew":[],"system":[]},"content_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","verification":{"commands":[],"expected_files":["Firezone VPN"]}},"agent_fit":{"target":"codex","score":64,"status":"needs_confirmation","policy":"confirm","why":["target_tools includes codex","asset_kind skill","install_mode single","policy confirm","risk_profile.network_access is true","trust established"],"asset_kind":"skill","install_mode":"single"},"trust":{"author_trust_level":"established","verified_publisher":false,"asset_signed_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","signature_status":"hash_only","install_count":0,"report_count":0,"dangerous_capability_badges":["network_access"],"review_status":"unreviewed","signals":["asset has usage views","author has published assets","content hash available"]},"provenance":{"owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","owner_name":"AI Open Source","source_url":"https://tokrepo.com/en/workflows/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","content_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","visibility":1,"created_at":"2026-05-05 08:34:24","updated_at":"2026-05-24 03:13:32"},"target_adapter":{"target":"codex","adapter":"skill-directory","root":"~/.codex/skills","entrypoint":"SKILL.md","manifest_path":"~/.codex/tokrepo/install-manifest.json","staging_root":"~/.codex/tokrepo/staged/2abdf176-481a-11f1-9bc6-00163e2b0d79","install_modes":["single","bundle","split","stage_only"],"activates_files":true},"install_plan":{"schema_version":2,"target":"codex","asset_uuid":"2abdf176-481a-11f1-9bc6-00163e2b0d79","asset_title":"Firezone — Self-Hosted WireGuard VPN with Zero Trust Access","source_url":"https://tokrepo.com/en/workflows/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","install_mode":"single","entrypoint":"Firezone VPN","preconditions":[{"type":"target_supported","status":"pass","message":"codex install target is supported"},{"type":"install_root","status":"pass","message":"~/.codex/skills for activated skills; ~/.codex/tokrepo/staged for staged assets"},{"type":"target_tool_metadata","status":"pass","message":"metadata allows codex"},{"type":"content_hash","status":"pass","message":"asset metadata includes content_hash"},{"type":"trust_policy","status":"pass","message":"publisher trust level is established"},{"type":"policy_decision","status":"warn","message":"confirm for 2abdf176-481a-11f1-9bc6-00163e2b0d79 (single)"}],"actions":[{"type":"write_file","path":"~/.codex/skills/tokrepo-firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176/SKILL.md","source_name":"Firezone VPN","sha256":"7fd2f70033494e8dbc2a82a8c51d2d0f707368f14c1ac1fe263517fc569a3f39","bytes":3508,"risk":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":true},"if_exists":"overwrite","entrypoint":true}],"policy_decision":{"decision":"confirm","requires_confirmation":true,"reasons":["risk_profile.network_access is true"]},"requires_confirmation":true,"rollback":[{"type":"remove_file","path":"~/.codex/skills/tokrepo-firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176/SKILL.md"}],"post_verify":[{"type":"file_sha256","path":"~/.codex/skills/tokrepo-firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176/SKILL.md","sha256":"7fd2f70033494e8dbc2a82a8c51d2d0f707368f14c1ac1fe263517fc569a3f39"}],"metadata":{"asset_kind":"skill","target_tools":["claude_code","codex","gemini_cli"],"install_mode":"single","entrypoint":"Firezone VPN","risk_profile":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":true},"dependencies":{"npm":[],"pip":[],"brew":[],"system":[]},"content_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","verification":{"commands":[],"expected_files":["Firezone VPN"]}},"agent_fit":{"target":"codex","score":64,"status":"needs_confirmation","policy":"confirm","why":["target_tools includes codex","asset_kind skill","install_mode single","policy confirm","risk_profile.network_access is true","trust established"],"asset_kind":"skill","install_mode":"single"},"trust":{"author_trust_level":"established","verified_publisher":false,"asset_signed_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","signature_status":"hash_only","install_count":0,"report_count":0,"dangerous_capability_badges":["network_access"],"review_status":"unreviewed","signals":["asset has usage views","author has published assets","content hash available"]},"provenance":{"owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","owner_name":"AI Open Source","source_url":"https://tokrepo.com/en/workflows/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","content_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","visibility":1,"created_at":"2026-05-05 08:34:24","updated_at":"2026-05-24 03:13:32"},"target_adapter":{"target":"codex","adapter":"skill-directory","root":"~/.codex/skills","entrypoint":"SKILL.md","manifest_path":"~/.codex/tokrepo/install-manifest.json","staging_root":"~/.codex/tokrepo/staged/2abdf176-481a-11f1-9bc6-00163e2b0d79","install_modes":["single","bundle","split","stage_only"],"activates_files":true},"evidence_bundle":{"acceptance_gate":{"recommended_action":"stage_or_request_confirmation","rule":"Agents should only activate an asset after evidence_bundle.integrity, policy_compatibility, rollback, and post_verify have been inspected.","status":"caution"},"asset_title":"Firezone — Self-Hosted WireGuard VPN with Zero Trust Access","asset_uuid":"2abdf176-481a-11f1-9bc6-00163e2b0d79","eval_evidence":["https://tokrepo.com/evals/install-safety.json","https://tokrepo.com/evals/trust-evidence-coverage.json","https://tokrepo.com/evals/handoff-quality.json"],"generated_at":"2026-05-23T19:13:33Z","integrity":{"content_hash":"8cee02ce076997e6b2d93246988066942829a55c49722a852c2d2d8ec371ef63","declared_content_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","file_count":1,"hash_algorithm":"sha256","install_plan_hash":"fd6f0a638bef8b853dbc98870040f6f5307bef7da38afec9f335d8318374be94"},"policy_compatibility":{"permission_envelope":{"destructive":false,"executes_code":false,"file_count":1,"filesystem_write":["~/.codex/skills"],"global_config_write":false,"network":true,"requires_secrets":[],"uses_absolute_paths":false},"policy_decision":{"decision":"confirm","requires_confirmation":true,"reasons":["risk_profile.network_access is true"]},"requires_confirmation":true,"target":"codex","trust_score_v2":{"recommended_action":"stage_or_request_confirmation","status":"caution","trust_score":60}},"provenance":{"asset_kind":"skill","asset_title":"Firezone — Self-Hosted WireGuard VPN with Zero Trust Access","asset_uuid":"2abdf176-481a-11f1-9bc6-00163e2b0d79","computed_bundle_hash":"8cee02ce076997e6b2d93246988066942829a55c49722a852c2d2d8ec371ef63","content_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","created_at":"2026-05-05 08:34:24","generated_at":"2026-05-23T19:13:33Z","install_plan_hash":"fd6f0a638bef8b853dbc98870040f6f5307bef7da38afec9f335d8318374be94","owner_name":"AI Open Source","owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","parent_uuid":"","schema_version":2,"source":"tokrepo_asset","source_url":"https://tokrepo.com/en/workflows/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","updated_at":"2026-05-24 03:13:32","visibility":1},"sbom":{"asset_kind":"skill","asset_title":"Firezone — Self-Hosted WireGuard VPN with Zero Trust Access","asset_uuid":"2abdf176-481a-11f1-9bc6-00163e2b0d79","capability_flags":{"destructive":false,"executes_code":false,"modifies_global_config":false,"network_access":true,"requires_secrets":[]},"content_hash":"8cee02ce076997e6b2d93246988066942829a55c49722a852c2d2d8ec371ef63","dependencies":{"brew":[],"mcp":[],"npm":[],"pip":[],"system":[]},"files":[{"bytes":3508,"path":"~/.codex/skills/tokrepo-firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176/SKILL.md","role":"entrypoint","sha256":"7fd2f70033494e8dbc2a82a8c51d2d0f707368f14c1ac1fe263517fc569a3f39","source_name":"Firezone VPN"}],"format":"SBOM-lite","install_mode":"single","schema_version":1,"target":"codex"},"schema":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json","schema_version":1,"schemas":{"asset_verification":"https://tokrepo.com/schemas/asset-verification.schema.json","evidence_bundle":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json","install_plan":"https://tokrepo.com/schemas/install-plan.schema.json","provenance":"https://tokrepo.com/schemas/provenance.schema.json","sbom":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json#/properties/sbom"},"signature_evidence":{"content_hash":"8cee02ce076997e6b2d93246988066942829a55c49722a852c2d2d8ec371ef63","hash_algorithm":"sha256","install_plan_hash":"fd6f0a638bef8b853dbc98870040f6f5307bef7da38afec9f335d8318374be94","schema_version":1,"signed_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","status":"hash_only","verification_notes":["hash_only evidence proves content integrity but not publisher identity unless an external signature verifies it"]},"source_url":"https://tokrepo.com/en/workflows/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","target":"codex"},"sbom":{"asset_kind":"skill","asset_title":"Firezone — Self-Hosted WireGuard VPN with Zero Trust Access","asset_uuid":"2abdf176-481a-11f1-9bc6-00163e2b0d79","capability_flags":{"destructive":false,"executes_code":false,"modifies_global_config":false,"network_access":true,"requires_secrets":[]},"content_hash":"8cee02ce076997e6b2d93246988066942829a55c49722a852c2d2d8ec371ef63","dependencies":{"brew":[],"mcp":[],"npm":[],"pip":[],"system":[]},"files":[{"bytes":3508,"path":"~/.codex/skills/tokrepo-firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176/SKILL.md","role":"entrypoint","sha256":"7fd2f70033494e8dbc2a82a8c51d2d0f707368f14c1ac1fe263517fc569a3f39","source_name":"Firezone VPN"}],"format":"SBOM-lite","install_mode":"single","schema_version":1,"target":"codex"},"signature_evidence":{"content_hash":"8cee02ce076997e6b2d93246988066942829a55c49722a852c2d2d8ec371ef63","hash_algorithm":"sha256","install_plan_hash":"fd6f0a638bef8b853dbc98870040f6f5307bef7da38afec9f335d8318374be94","schema_version":1,"signed_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","status":"hash_only","verification_notes":["hash_only evidence proves content integrity but not publisher identity unless an external signature verifies it"]},"provenance_v2":{"asset_kind":"skill","asset_title":"Firezone — Self-Hosted WireGuard VPN with Zero Trust Access","asset_uuid":"2abdf176-481a-11f1-9bc6-00163e2b0d79","computed_bundle_hash":"8cee02ce076997e6b2d93246988066942829a55c49722a852c2d2d8ec371ef63","content_hash":"2071f00c9c2ab824a1dd479f49d930e05638762d94a89248d8de91cab58cafba","created_at":"2026-05-05 08:34:24","generated_at":"2026-05-23T19:13:33Z","install_plan_hash":"fd6f0a638bef8b853dbc98870040f6f5307bef7da38afec9f335d8318374be94","owner_name":"AI Open Source","owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","parent_uuid":"","schema_version":2,"source":"tokrepo_asset","source_url":"https://tokrepo.com/en/workflows/firezone-self-hosted-wireguard-vpn-zero-trust-access-2abdf176","updated_at":"2026-05-24 03:13:32","visibility":1},"transitive_dependencies":null}}