Adapters
Note
Guide: draft. The source build implements the current behavior below; remaining design work is marked explicitly.
An adapter connects a host to Shiin. It intercepts proposed actions, builds action requests, and enforces the resulting decision using the host’s own protocol. Adapters never make decisions.
Enforcement levels
Every adapter declares an enforcement level:
| Level | Meaning |
|---|---|
| L1 Cooperative | The host honors the decision through its hook mechanism. |
| L2 Mediated | Shiin sits in the data path. |
| L3 OS-enforced | The operating system or a sandbox enforces the decision. |
Hosts
| Host | Level | Interception | Milestone |
|---|---|---|---|
| Claude Code | L1 | hooks | v0.1 |
| Codex CLI | L1 | hooks | v0.2 |
| Cursor | L1 | hooks | v0.2 |
| MCP proxy | L2 | data path | v0.5 |
Honest labeling
Every adapter states its enforcement level and what it cannot see.