Deploys wait for an exception
An agent’s deploy is blocked until someone allows it, and the answer stays on the record.
A deploy, stopped
- The agent carries on
- The denial reaches the agent as a reason, so it moves on to the rest of the release.
- Allowed once, on purpose
- The agent or person asks from the record. An admin allows it once or for a while, and the retry passes.
- One command, not a blanket pass
- An exception covers the command it was granted for, once or for a while, and the record keeps it.
The Production changes policy
Deploys, migrations and infra applies against production.
- It installs as Observe, so you see your own traffic first. Turn it to Block when you are ready.
- A command does not say which environment it targets, so every deploy and apply is watched, not only production ones.
Related use cases and clients
- Secrets and env filesFile reads and writes of env files, keys and credentials are blocked, and sending them is flagged by the read scan.
- Set up Claude CodeEvery shell command, edit, read, fetch and MCP call in Claude Code passes the adapter before it runs.
- Set up CodexShell commands, patches and MCP tools in Codex pass the adapter before they run, and its rules hold even with hooks off.