Blocked Decision
subprocess · kubectl delete deployment api -n prod
← Back to audit trail
DENY

subprocess kubectl delete deployment api -n prod

Decision
DENY
Rule
block-network-cli-shellout
Reason
Use the corresponding SDK or MCP server -- shelling out to a network CLI bypasses egress policy.
Agent
kafka-consumer-sre
Environment
prod
User
system
Task
schema migration
Session
sess-18beb230
Received
5/29/2026, 8:34:10 PM
Event time
5/24/2026, 9:19:18 PM

Model verdict

Reserved for the v2 context-aware decision model

Not yet evaluated — populated automatically once the v2 model lands.