| Pattern | Verdict | Scope |
|---|---|---|
systemctl status * |
ALLOW | tag: web |
rm -rf * |
BLOCK | all servers |
apt install * |
CONFIRM | web-01 |
Rule-based command filter
Every proposed command is checked against your rules before it can run.