# `rho run`

## Purpose

`rho run` is the trust boundary for execution.

This command should own:

- sandbox selection
- protected action validation
- deterministic execution
- run status recording and replay

## Responsibilities

- execute a declared tool
- enforce sandbox and filesystem policy
- validate request manifests
- use `rho crypto` when signed or encrypted artifacts are required
- call `rho auth` before protected actions
- invoke middleware when required
- capture outputs and status


## Important Rule

`rho run` should be the only place where protected tools actually execute.

That is the main simplification and the main security improvement.
