Installs and publishes wait for review
Installs, and publishes to a registry, are blocked until someone allows them.
A publish, stopped
- Publishes are a person’s call
- A publish to a registry needs an exception, so a person decides each release.
- Allowed once, on purpose
- The agent or person asks from the record. An admin allows it once or for a while, and the retry passes.
- One command, not a blanket pass
- An exception covers the command it was granted for, once or for a while, and the record keeps it.
The Installs and publishes policy
Unpinned installs, scripts piped from the network, and publishes to a registry.
- It installs as Observe, so you see your own traffic first. Turn it to Block when you are ready.
- Whether an install is pinned is not visible, so every install is watched.
- A script piped into a shell is already refused by the adapter, which reads commands literally.
Related use cases and clients
- Network off the allowlistA web fetch to a host your org hasn’t named is blocked until someone reviews it.
- Production changesAn agent’s deploy is blocked until someone allows it, and the answer stays on the record.
- Set up CursorShell commands, MCP tools and file reads in Cursor pass the adapter before they run.