Module blacklist 

Security blacklist — always-enforced dangerous-command patterns.

Structs

BlacklistRule

One blacklist rule: a description plus matchers keyed by argument name.

SecurityBlacklist

Security blacklist. Implements GlobalResolver so it slots into the approval pipeline’s Phase 4 (always-enforced escalation to Always).

Enums

ArgMatcher

Argument matcher (lobehub ArgumentMatcher analog).

Functions

default_blacklist_rules

Default always-on rules. Users extend (not replace) via config.