Expand description
Whether a run may execute commands.
Per ADR-0013 the host owns the boundary. Commands are enabled by default:
a harness that cannot run cargo test does very little real work, and the
flag that used to gate them was theater once a process spawned — an
in-process path check cannot confine a command that is already running.
So basis claims nothing. The process holds whatever authority the user who
started it holds, and confinement, where it is wanted, comes from the OS —
docs/containerization.md has the patterns. Denying is one line for a run
that is meant to read and report.
Enums§
- Shell
Access - Whether the agent may run commands.