Pre-execute hook that denies writes under a read-only result zone of protected roots; every other path passes through. State directory and zone names are configurable via environment variables.
This plugin has not published an npm package, so the store does not offer an install command yet. Use the repository link below to view the source.