{"timestamp":"2026-05-30T20:55:44.765443314+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s -L https://github.com/trending | sed -n '1,240p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b0f1463-6336-402a-b112-346939f7baf6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:00:41.194968424+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /tmp/r1.html -w \"%{http_code}\" \"https://gitstar-ranking.com\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e8e5b33e-52e1-4a0f-be34-2160d90ca6c4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:00:43.039771909+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /tmp/r2.html -w \"%{http_code}\" \"https://star-history.com\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"513ee193-45ae-42b4-a862-be77a2eab432","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:00:44.175697774+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /tmp/r3.html -w \"%{http_code}\" \"https://ossinsight.io\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4476a7fc-d338-4530-bdec-ad8d00074531","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:00:49.248416108+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://ossinsight.io\" | sed -n '1,220p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5bf997aa-9102-4a54-a35f-08e61ac5f07c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:00:55.596664572+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://ossinsight.io/trending\" | sed -n '1,220p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f99b4893-47ea-496d-8601-cad824b4ed30","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:01:23.970870369+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"for d in gitrank.io gitstar.xyz gitstars.org gitrank.com startrank.io githut.inf[...redacted 108 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4980fe6e-0d0f-47e1-b2a9-baff9360a4a2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:01:57.676228305+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://gitstar.xyz\" | sed -n '1,220p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed78d5b0-819f-4072-94b7-b8eb6ddc3360","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:02:03.017914727+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://gitstar.xyz/lander\" | sed -n '1,260p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"346b9add-579f-4645-960c-f4e5b9c8ff35","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:02:10.193799730+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"for d in gitrank.com girstats.com gitranking.com gitpulse.io repo-rank.com repos[...redacted 115 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d58b752-3982-4c78-9027-d9efc1992fe9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:14:44.860895048+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://ossinsight.io/trending\" | grep -oE 'https://[^\"]+api[^\"]*' | he[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dc94c857-b0a2-402a-bf77-d90df2074ae5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:14:50.574395413+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://ossinsight.io/trending\" | grep -oE '\"/api[^\"]*\"' | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e7cf0158-309e-4318-866e-83a986c3af66","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:37:10.633279213+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://trendshift.io/repositories/weekly\" | sed -n '1,260p' | head -n[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ccc3e20b-9841-4b6f-a5f7-5bba153ece36","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:37:18.444687236+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://trendshift.io/repositories/weekly\" | grep -oE '[^\"<> ]+/api/rep[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"057e1203-6e69-4c73-9f26-1af2646bc167","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:37:25.279508954+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://trendshift.io/api/repositories?period=weekly\" | head -100","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e913ad6-cdd4-4665-9a07-727c1e61178d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:37:31.910380142+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"for path in /api/trending/repositories /api/trending?period=weekly /api/v1/repos[...redacted 236 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ed0372d-09d0-4fb2-87a2-a6efd83c3b65","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:39:31.450238290+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://github.com/trending?since=monthly\" | sed -n '1,260p' | head -n[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4fb3732c-71ec-426a-ae2d-3ec967118a86","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:40:54.938328567+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"which node npm npx 2>/dev/null || echo \"node not found\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5673ca69-deff-453a-8ed3-3b3936c1168d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:41:31.055395738+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"export PLAYWRIGHT_BROWSERS_PATH=0 && npx playwright install chromium","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00d1f362-feab-4dd8-90f7-e5b51ca4c9e8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:41:52.332968248+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"npm install playwright@latest","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"85962f05-61f3-4664-a770-82037331148d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:41:57.002519547+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /home/ice/trendshift-project && cd /home/ice/trendshift-project && npm [...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"830795d0-cbce-48e1-8701-fc9e4e0c7fec","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:42:08.037799217+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/trendshift-project && node fetch-trendshift.mjs","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62383207-18e0-4c40-83ee-8b49ff27fc2d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:42:13.251773836+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/trendshift-project && export PLAYWRIGHT_BROWSERS_PATH=0 && npx play[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cfb2dc7e-9c5d-4881-8024-0ac21c126d77","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:42:31.187755785+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/trendshift-project && node -p \"require('playwright/package.json').v[...redacted 97 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb97ae3a-2b5b-4db1-812e-50f90bae0e79","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:42:33.921251780+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/trendshift-project && node fetch-trendshift.mjs","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff5bd1eb-ed37-454a-9ab7-816ecaf32020","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:44:20.674665744+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Warn","rule_ids":["lookalike_tld"],"command_redacted":"curl -L -s -o /tmp/cloakbrowser.html https://cloakbrowser.dev/ && grep -iEo '(np[...redacted 157 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9feb80a5-0ea7-4406-ad16-461ba2d78622","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["lookalike_tld"]}
{"timestamp":"2026-05-30T21:44:38.593951764+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"npm view cloakbrowser name version description readme homepage repository.url bi[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b9d36bd-1c9d-41ee-ac24-3faa40e8fee4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:44:43.370745465+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"export PLAYWRIGHT_SKIP_VALIDATE_HOST_REQUIREMENTS=1\nnpm install playwright-core@[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5423ab0f-213f-4aad-a718-22f28d442ab9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:44:47.567672580+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls . && ls node_modules | grep -E 'cloakbrowser|playwright'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"148bb31a-cba9-4168-8695-d25a247e3dbd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:45:13.123567640+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/trendshift-project && node fetch-trendshift.mjs","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a9633a69-b4a9-47d8-ba3e-25181f5985d1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:45:26.360637181+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get update","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c9f807be-b50b-4ba8-b274-3f47941e72e3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:45:31.471928770+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"whoami; id; ls -l /usr/bin/apt-get; ls -l /usr/bin/apt 2>/dev/null || true; test[...redacted 72 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c23bc6fc-bbca-4b76-86c3-365b866d2ac5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T21:45:34.935309925+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"which xvfb-run || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9cf25ded-369f-41a0-b42b-e50ffb64df80","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:41:50.335090042+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -L -I -s https://share.google/eQH9zakjhcCu1QPML | grep -i 'location\\|conten[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5b653190-0e5c-4c8d-b026-f9442762ff08","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:41:55.829296398+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -L -s https://share.google/eQH9zakjhcCu1QPML | sed 's/<[^>]*>//g' | tr -s '[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b5c616d-fea5-45c2-bf85-a04a4adae99b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:42:00.123690445+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/outsourc-e/hermes-workspace | head -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da3b6f55-baa5-40fb-b0b3-b70042e551d5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:42:01.444156360+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/NousResearch/hermes-agent | head -120","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c13616d-2f47-446c-939f-175b4229fc3c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:42:09.708116766+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/outsourc-e/hermes-workspace | jq '{full_nam[...redacted 201 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44974c77-6873-4beb-b89d-f2da3706983d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:42:10.846189632+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/NousResearch/hermes-agent | jq '{full_name,[...redacted 199 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab3988a1-3231-487c-a021-5304fa973771","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:42:11.961199843+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/outsourc-e/hermes-workspace/readme | jq '{n[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8147a56c-209f-4e0e-85ab-80c437c6596c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:43:31.608775367+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s -L https://api.github.com/repos/outsourc-e/hermes-workspace/readme | pyt[...redacted 131 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab6effcd-7d4e-4122-ad4a-b0b40e0ea595","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-30T22:43:45.603180224+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s https://api.github.com/repos/outsourc-e/hermes-workspace/readme | python[...redacted 100 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e18b1b90-f0b0-4155-9609-ef8037ddf1ce","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-30T22:43:50.771414877+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s -L https://raw.githubusercontent.com/outsourc-e/hermes-workspace/refs/he[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca43971a-77a9-4d4f-a105-d2ecbc84ef0d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:06.961643186+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/antirez/ds4.git 2>&1 | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c862dcc5-b881-4ec0-9593-4857237b2b95","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:08.666264804+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth 1 https://github.com/FULU-Foundation/OrcaSlice[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"58607f87-3277-4e5e-a57d-fc4aea20350c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:08.986358879+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/BigPizzaV3/CodexPlusPlus.git /home/ice/CodexPlusPlu[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da068410-c905-4775-876d-9c964ae1e3ea","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:17.300072853+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/CodexPlusPlus && find . -maxdepth 3 -type f -name \"*.md\" -o -name \"[...redacted 51 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36884a7b-c0e1-4e8d-be93-c6df4a6cb090","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:21.834067093+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OrcaSlicer-bambulab && find . -maxdepth 2 -name \"README*\" -o -name [...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"83d872a7-55c1-4973-bb80-a2723428abf3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:30.207652763+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OrcaSlicer-bambulab && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"116c9024-04b0-4ae3-b771-275f3a8aae3c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:32.270689641+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OrcaSlicer-bambulab && ls src/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d336c302-8eaa-435f-902c-0d20650c66e8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:40.434314744+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OrcaSlicer-bambulab && du --max-depth 0 -h . && echo \"---\" && find [...redacted 71 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"456d8b08-ecc4-4cfc-95cb-668a42adf348","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:44.570498911+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OrcaSlicer-bambulab && find deps -maxdepth 1 -type d | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e177acd7-4d23-4d18-9e0b-fa9083d11d3c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:46.595721682+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OrcaSlicer-bambulab && head -200 CMakeLists.txt","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35360fc8-4de7-4aa7-ba17-dd37e8e00c08","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:51:48.682617019+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OrcaSlicer-bambulab && ls src/libslic3r | head -40 && echo \"---\" &&[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5527c134-5879-47f4-87ba-14b53ffe468c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:08.300020235+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/V4bel/dirtyfrag.git 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63c45b91-3931-42ae-b45f-4afc3b6551ba","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:09.988720360+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/nexu-io/html-anything /home/ice/html-anything 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8440b112-2f83-4da6-a555-3a658cb90f3a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:10.151619483+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/darrylmorley/whatcable.git 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0980ae21-0f31-4950-bc97-f9e2d2f25a40","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:12.797500457+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/dirtyfrag && find . -maxdepth 2 -not -path './.git/*' | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eeff3882-ef5e-4738-9aa5-17d9763a8ecf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:15.072463583+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/whatcable && find /home/ice/whatcable -maxdepth 3 -type f | hea[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1741b500-1ac3-4409-b733-47fffef4f9e6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:15.113762833+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/html-anything -maxdepth 2 -type f \\( -name \"README*\" -o -name \"pa[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c79cbbb2-75d9-4846-b3ab-bf3f5853d385","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:28.690184636+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/html-anything/next/src/app/api -maxdepth 2 -type f | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c2e3c26b-8186-475e-8420-b3ee449b4f8d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:51.321935628+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/perplexityai/bumblebee /home/ice/bumblebee","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5014a204-9075-4ae1-9ffc-7340f2087e7b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:52.776251958+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/vercel-labs/zero-native.git 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00bd50bf-f7de-4a11-b3dd-1a5b010fb52a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:53.495839800+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth=1 https://github.com/vercel-labs/zerolang.git [...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"94cd5301-480c-4d7b-ae4b-e8322aa0e6ac","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:56.063880606+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/zerolang && ls -la && echo \"---\" && cat README.md 2>/dev/null | hea[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7813d765-00e6-4fb0-809d-dfd2eca25fb1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:52:56.175376104+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/bumblebee && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1388651c-dd45-42c4-b588-43b28bbb907b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:01.567096082+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/zero-native/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c2622635-5bba-47bf-983f-8e32580ef940","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:03.752676681+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/bumblebee && find internal -type f -name \"*.go\" | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88433f35-8212-4612-9bf7-18958f823db9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:08.334074016+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/zero-native/packages/ /home/ice/zero-native/examples/ /home/ice[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69b6b9fe-2416-4b06-9be9-85c11c611a61","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:09.391753674+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/zero-native/packages/zero-native/package.json 2>/dev/null || ls /h[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"834d8b52-4e61-4743-937a-11e01452e2af","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:17.988994444+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/zero-native && git log --oneline -n 20 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52dd5025-407d-4c26-bf62-ce04e85f4c76","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:34.269929551+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/simplifaisoul/osiris.git 2>&1 | tai[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3ffdc4e-ccec-4f14-b4b8-7658f8031d9d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:36.779262126+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/FoundZiGu/GuJumpgate.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4163a24a-1bbb-4923-8deb-1d8a2517e6f1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:38.472573430+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/microsoft/SkillOpt.git /home/ice/SkillOpt","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"61ef9782-ef19-4624-9444-ea11d74daf0d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:39.341440458+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/osiris && find . -maxdepth 2 -type f | sed 's|^\\./||' | sort | head[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c18292b1-3111-497c-b5b3-9fc034523f3a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:42.301228938+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/GuJumpgate && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dfbe67b9-65be-449f-bb95-15864aca2944","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:53:55.423648910+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/osiris && find src -type f -name \"*.ts\" -o -name \"*.tsx\" | head -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"369f8fa5-f1d1-4858-937a-8065dc90d215","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:06.640845064+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/osiris && find src -type f -name \"*.ts\" -o -name \"*.tsx\" | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63997e2a-0220-4881-9443-78c0caff5dc3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:23.555756847+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone --depth 1 https://github.com/strukto-ai/mirage.git /tmp/mirage","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d539abd-347c-4316-99cc-ce694ff305b7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:24.089192836+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && ls -la | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"faffa09b-0844-44bf-a1db-26f2ba39c321","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:25.389692569+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"pwd && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea2fa264-8f0c-4227-ae87-0af0344264a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:26.056775701+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/XBuilderLAB/cheat-on-content.git re[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"523a78c9-d02f-415a-9461-e231203ab279","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:28.938363701+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp/mirage && echo '---' && ls -la /tmp/mirage packages 2>/dev/null || t[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"479cff2a-f244-4527-8c82-18410d39a493","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:30.048215768+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone --depth 1 https://github.com/simonlin1212/a-stock-data.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b164448c-4620-4554-b649-371cded19571","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:30.811943123+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/repo-cheat-on-content && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47428f33-9094-4001-b995-c830ff30d185","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:34.474739052+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c525eb07-5093-46b8-a488-5f0a566bb222","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:36.759852888+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/a-stock-data && find . -maxdepth 2 -type f | head -100","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f0b9bc5-c830-4cf3-82d2-59097f08b587","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:40.071594943+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/repo-cheat-on-content && find . -maxdepth 2 -type f | head -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0d27075c-f3b5-4900-9558-b12260226c6a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:54:49.480457531+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/repo-cheat-on-content && find skills -maxdepth 3 -type f | head -10[...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f9d85d15-ea4a-4f1e-bd71-c4445bb8e3b2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:55:15.301865090+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/virgiliojr94/book-to-skill.git /home/ice/book-to-sk[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9081b0da-c932-46c8-8959-5a0ef0de0d7d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:55:15.393236058+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/thananon/9arm-skills.git /home/ice/9arm-skills 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f6b859e-54ab-41a2-acb9-6e15c508d815","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:55:16.070264697+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14c40dd3-753b-42a2-a7c6-ab549fc2dd82","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:55:19.861620672+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/crafter-station/petdex.git /home/ice/petdex","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ec85975-fa9c-42f6-8d5b-57e9bc7d8597","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:55:49.572660161+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/huangserva/3DCellForge.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d333c7e9-443b-44d9-9eb2-ca71c3e705fd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:56:01.998925709+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/3DCellForge && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"07d33a5b-c6bf-47b7-b809-a2d7ed051691","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:05:43.621954126+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/Significant-Gravitas/AutoGPT.git 2>[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50491131-59f1-4eca-abc5-222be8f0f29f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:05:43.735410441+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/ollama/ollama.git 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"655f9b73-4a2a-4d0f-b560-8daef04ad53a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:05:44.403918641+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth 1 https://github.com/openclaw/openclaw.git 2>&[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a7d0158-0436-4459-ab4e-bda7d6e99835","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:05:57.294646292+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/ollama","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4cfbd2b1-2f8f-4623-8842-b75dd15a6e44","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:06.198014543+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/ollama/cmd && ls -la /home/ice/ollama/api && ls -la /home/ice/o[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4373f1fe-e572-4e79-b544-eb3b53e2de20","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:10.436651801+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/AutoGPT","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"db6df038-a2f2-40b8-a123-1ab4079cfdfa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:12.119626024+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/ollama/llama && ls -la /home/ice/ollama/cmd/bench && ls -la /ho[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9112539-3eed-4100-85a2-913453f3f62c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:19.824375916+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/AutoGPT && git log --oneline -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5db4e45d-d53e-46c6-bc8d-24c0b8962fa6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:25.816245269+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/AutoGPT && find . -maxdepth 3 -type d | sed 's|^\\./||' | sort | hea[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24499e7e-edb6-441e-b82b-8977d68497fe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:41.528276671+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/infiniflow/ragflow.git /home/ice/ragflow","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"86373b29-cb6d-49f6-b242-6f982623e052","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:41.837748850+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/open-webui/open-webui.git open-webu[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2d5dfd90-b611-4277-862e-389e1b3c96ab","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:42.162398356+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth 1 https://github.com/vllm-project/vllm.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a994696-2185-4425-ba07-eca20cd6f1cc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:48.529032075+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/open-webui-repo && ls -la && echo \"---\" && find . -maxdepth 2 -type[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"497b19e6-8a1e-4d2c-9b3b-492de393eea8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:56.515301909+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/ragflow -maxdepth 2 -type d | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fbe37fd-8b1d-40e1-9130-ddd959ff4e85","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:06:58.375749092+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/open-webui-repo && find backend -maxdepth 3 -type d | head -40 && e[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6788346d-4c71-44a8-8b7e-bed187a536fe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:07:08.206344288+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/ragflow/ && ls /home/ice/ragflow/rag/ && ls /home/ice/ragflow/a[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2db4aa48-91e8-43be-aa90-f88014085c06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:07:14.040484066+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/ragflow/rag/llm/ && echo \"---\" && ls /home/ice/ragflow/rag/flow/ &&[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3330b569-0ae7-4f4c-b4fe-41c86328f13b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:07:15.096410235+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/ragflow/internal/ && echo \"---\" && ls /home/ice/ragflow/deepdoc/par[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"932867ad-bd7f-4200-90a8-024d2dfb80ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:07:37.434500590+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/browser-use/browser-use.git /home/ice/browser-use &[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ac8417f9-e734-46e2-bfc6-ee631d129aaf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:07:37.521891302+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/langgenius/dify.git 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f96e41a-3040-4efe-9db4-aa2a28c3f7f4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:07:37.752747998+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth=1 https://github.com/langflow-ai/langflow.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f8f482db-3165-4626-9ef8-794418b14c93","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:07:49.131910434+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/langflow && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"343bae1f-7b48-4017-a2fd-9e5c95c703c2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:02.572148159+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/dify && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d2c668b-d97c-4844-bb38-6aef6534cac4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:29.444590154+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/OpenHands/OpenHands.git /home/ice/OpenHands 2>&1 | [...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f731321-3060-4ec4-b347-2ef91c016e3b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:29.595537141+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth 1 https://github.com/lobehub/lobehub.git 2>&1 [...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3ea22e5f-9110-4887-9138-6a5a6ed265ff","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:31.664449470+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth 1 https://github.com/langchain-ai/langchain.gi[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7379f513-5422-45e6-99d9-1b7869c2e785","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:38.518272368+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/langchain && pwd && ls -la && find . -maxdepth 2 -type f \\( -name '[...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc0a0012-a0e1-43d1-bfc3-00416503b9a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:40.300990898+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/lobehub && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0566704f-4ae4-4701-945d-2af45b22e0bd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:43.281528062+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/langchain && ls libs && find libs -maxdepth 2 -name pyproject.toml [...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a8fe9de7-3fb2-4733-8ed1-cc117a5d5aec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:50.611533154+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands && cat README.md 2>&1 | head -200","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0f4fbed7-74a0-49bc-afa9-cb4805194c61","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:53.045569494+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/langchain && find .github -maxdepth 2 -type f | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"80aaf64a-0445-4417-9484-62b555e6954c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:54.104351066+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/langchain && find libs/partners -maxdepth 2 -type d -name .github -[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ed87b4d-c549-472c-828d-1057231ae80f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:55.098674660+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0be3954c-4777-4e4f-a9b1-f5e185deb1e7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:56.154869982+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands && cat poetry.lock 2>&1 | head -30 || cat pyproject.toml [...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"090a6b50-db14-497d-8aa2-2b619fb10a2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:57.211781331+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands && ls -la frontend/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06c2d8c0-035b-4311-b00a-ee92be856acf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:08:58.707012101+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/langchain && find . -maxdepth 2 -type d | sed -n '1,120p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2f5b2ef-90f7-4d40-8aa8-e5ebc4276764","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:01.748187352+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands && cat pyproject.toml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eef5fe25-1e9c-4a91-9060-fadcc9836040","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:02.806287762+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands/frontend && cat package.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0d39013f-9dd3-4d05-9ebb-b0cfaf90f42b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:03.862865828+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands && ls openhands/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d64d5300-6124-43f1-a8c0-e7415a45975d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:09.577098624+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands && find openhands -maxdepth 2 -type d | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ccc857a-92e9-4832-aa50-34dd92576266","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:10.634058604+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/OpenHands/enterprise && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f2507ba6-ead3-4f23-866d-093bcc2e5ec8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:26.918109717+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth=1 https://github.com/obra/superpowers.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f877a3ea-afc2-47b2-821a-4a8e54cd3859","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:26.998929048+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/x1xhlol/system-prompts-and-models-of-ai-tools.git /[...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"84109b8e-99ce-4342-9889-bceb639d5d2a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:27.387913040+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/n8n-io/n8n.git /home/ice/n8n-repo --depth=1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"05f42fba-f46d-485f-9658-8b3267fbafe7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:31.126383059+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/repo-analyze && find . -maxdepth 3 -type f | sort | head -n 80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dec1addb-8c92-4088-aa53-2c16328e8bb1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:31.394560760+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/superpowers","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f291a21-7d03-4ac0-b542-26ca26d9b79d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:38.068808922+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/superpowers/skills","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b80b68e-e6bd-4513-a41b-a861f8018976","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:09:40.186041258+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/repo-analyze && find . -maxdepth 3 -type f -not -path './.git/*' | [...redacted 154 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0866d15c-cfb6-4846-9cbf-a1b3c900cca3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:10:01.230285664+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/Shubhamsaboo/awesome-llm-apps.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"de5e8163-26cd-4f3e-90b2-316b3fb506f4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:10:03.434708929+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/TauricResearch/TradingAgents.git /home/ice/TradingA[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c1a6e11-ef5c-4544-98bb-68fd566b5f18","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:10:03.663517352+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/google-gemini/gemini-cli.git --dept[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2043b490-1cf0-4e8c-9fe9-0bcc9fff9ea5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:10:11.146047708+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/gemini-cli && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a763b515-7c31-4324-8768-625f5fb0ed36","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:10:11.187214302+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git -C /home/ice/TradingAgents remote -v && git -C /home/ice/TradingAgents log -[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a7995c1b-a696-4514-868a-487819964376","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:10:26.058849843+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/gemini-cli && find packages -maxdepth 3 -type d | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0e1f441-7fb3-4dfb-8452-7343ff924b46","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:00.810444206+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone --depth 1 https://github.com/firecrawl/firecrawl.git /home/ice/firecra[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8cad2132-d98e-476c-814b-ce9e8e02cd19","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:04.592920100+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/firecrawl","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ee65d0a-abbb-4b69-a866-1ce0f569a06e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:05.377816202+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth 1 https://github.com/hacksider/Deep-Live-Cam.g[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b120b81-b5d8-4194-9aef-988cd931cd3f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:10.697850358+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/firecrawl -name \"package.json\" -maxdepth 4 | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fcfa005d-70fd-4ff3-8766-9431fab1a1d6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:13.878856337+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/Deep-Live-Cam && find . -maxdepth 2 -type f | sort | head -60","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc059da4-9d4d-4444-9727-35d50f747ce1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:15.018543781+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/firecrawl/apps/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c350354-9e38-4af6-86db-f3900930ed17","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:17.433984526+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/firecrawl/apps/api/src -maxdepth 2 -type d | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"463e2c6a-8f9a-425c-ae17-dd25ca16d0aa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:18.490750824+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/firecrawl/apps/api/src/index.ts 2>/dev/null && head -50 /home/ice/f[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9bcc10f3-c4d9-4f0d-b99a-a4318ef75cc3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:20.944143921+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/firecrawl/apps/api/src/scraper/scrapeURL -maxdepth 2 -type d | so[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5798b7e-6222-4ca8-ac6b-fa92e5ec3c66","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:22.001459164+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/firecrawl/apps -maxdepth 1 -type d | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64ea8c18-ce96-4daa-80a8-70e3e76fd2a0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:11:23.057554980+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/firecrawl -maxdepth 2 -name \"*.toml\" -o -name \"docker-compose*.ya[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"92927977-bfcb-46e5-ad72-a103992f99b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:28:16.530138402+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get update -qq && sudo apt-get install -y -qq libglib2.0-0 libnss3 liba[...redacted 111 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eb3fdbbb-8a53-44ff-a56f-d0ce3b554dac","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:28:20.788339765+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"apt-get --help 2>&1 | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bb96d260-9496-4eaf-980f-37fcce029525","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:28:23.891263199+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"apt-get install -y libglib2.0-0 libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 [...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bf27a831-bf4c-492a-a607-a627b6cf243e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:28:27.288747911+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find / -maxdepth 3 -name \"trendshift*\" -type f 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6139d72c-de5f-4ebc-ae83-593a13bb9b22","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:29:31.405919319+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=created:2026-05-29&sort=st[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"256d5207-b618-4477-9982-5a4b056738a5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:29:37.246973656+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://github.com/trending\" | head -c 2000","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c5b41e2-98c1-4116-b371-9d43056cbe34","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:30:54.018463411+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice | grep claude-code","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"27416687-f51f-4fb1-b89d-3cb6c1ac09f5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:30:55.344512932+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/harry0703/MoneyPrinterTurbo.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c515a100-358c-4d08-917f-f7d4c9f1c092","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:30:56.074317043+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/microsoft/markitdown | jq '{full_name, star[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f05124c2-16fa-4dc9-9e8e-42aa61bf6251","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:30:57.420965243+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/microsoft/markitdown/readme | jq '.content'[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ce025408-aea0-442e-be90-fc2980c75682","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:30:57.832345591+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/anthropics/claude-code.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dd86f0c9-8847-4632-ade0-bef290893ea9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:02.486405895+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json\nurl = 'https://api.github.com/repos/mic[...redacted 265 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2a5f1ac2-f5f0-4b30-a84e-869ba707a4d4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:03.713963794+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/claude-code","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ce81354-a8ef-45f1-949e-d56cbd4315ef","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:06.918388661+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone --depth 1 https://github.com/microsoft/markitdown.git /home/ice/markit[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8be44989-cfd3-4dd4-9cc3-36977a803221","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:12.504056551+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/markitdown","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"accb4ef9-2117-48f5-b3b1-66e3ebe5d6f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:12.526821056+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/claude-code -maxdepth 2 -type d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca575938-b466-4688-975d-64876fbce27e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:13.608893979+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/markitdown -maxdepth 2 -type f | sed 's|/home/ice/markitdown/||' [...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23b5c7a9-af89-4fcf-9cdf-5561ab2bcb8a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:16.890659105+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/MoneyPrinterTurbo && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4a5b6b4b-adba-4b78-899c-66c9870e0ac8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:20.509444956+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/claude-code -maxdepth 2 -name '*.ts' -o -name '*.js' -o -name '*.[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"86d90e93-78e4-4d7b-a9f7-71535b07c7d7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:22.453695179+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/markitdown/packages -type f -name \"*.py\" | head -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"519888fb-021e-4a58-8434-0b4c12514a9e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:25.519547279+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"du -sh /home/ice/claude-code && git -C /home/ice/claude-code log --oneline -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9ee6f6bc-ae88-4a8f-a9ba-9737ce4e4b36","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:26.800704298+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/markitdown/packages","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d1395682-f45a-4070-8f75-adbb4ad18fec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:41.593496147+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81997070-c107-42ee-8158-659875a29890","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:44.277843234+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth=1 https://github.com/EveryInc/compound-enginee[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3236597-c04a-49af-a987-0d115d64cb96","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:44.507781283+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.github.com/repos/revfactory/harness | jq '{full_name, descri[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc652bd1-4fe2-4c4e-a471-e30505b25513","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:45.477176571+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/OpenBMB/VoxCPM /home/ice/VoxCPM","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5448252d-66d7-4532-a703-c98b557a0188","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:46.642612362+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s https://api.github.com/repos/revfactory/harness | python3 -c \"import sys[...redacted 233 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62751e1b-b28c-4ef5-a62b-69a3f8983f55","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-30T23:31:50.435214680+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone --depth 1 https://github.com/revfactory/harness.git /tmp/harness-repo","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9621a9dc-3295-41aa-9b26-2353ec17c004","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:50.696694966+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/VoxCPM","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca57695c-ef68-4ce0-be5d-13e29fece7f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:31:55.634089191+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /tmp/harness-repo -maxdepth 2 -type f | sed 's|/tmp/harness-repo/||' | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"83a0b0d1-28f0-4622-ba3f-0e81ada7619e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:32:30.117723618+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth 1 https://github.com/chen08209/FlClash.git 2>&[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b572575-95a6-4496-8a56-579051e4c1b5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:32:30.337170634+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth=1 https://github.com/ruvnet/RuView.git","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"daafed72-034c-4d68-8a63-733e5b5ee815","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:32:36.876389673+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/FlClash && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5c9811fd-7666-4c2c-8b2b-062fc38f5bb5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:32:44.061580188+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/RuView && git log --oneline -n 20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b0a3ef8d-b519-406c-a407-aa953524b664","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:32:49.812214287+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/RuView && find . -maxdepth 2 -name \"assessment.md\" -o -name \"PROJEC[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c28c370-9118-4e92-913d-9dff2241293a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:32:50.567020401+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/FareedKhan-dev/train-llm-from-scratch /home/ice/tra[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"97462da0-366a-4d76-a30b-121baeaa6263","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:33:13.839635713+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"git clone https://github.com/OpenMOSS/MOSS-TTS.git /home/ice/MOSS-TTS","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9eda9ccc-b0b3-47a4-a698-fc626c2592be","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:33:15.475686988+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone https://github.com/dreammis/social-auto-upload.git 2>&[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fbb4073c-6e25-474b-97c2-bd5090dbf416","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:33:15.597788743+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && git clone --depth=1 https://github.com/DataTalksClub/data-engine[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0b5f91b-7b61-4710-8556-7977233e09ac","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:33:19.389435468+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/MOSS-TTS -maxdepth 2 -type f -name \"*.md\" -o -name \"*.py\" -o -nam[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"93e30194-7533-4fb6-9961-a88f6e818312","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:33:20.871432735+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/social-auto-upload && ls -la && echo \"---\" && find . -maxdepth 2 -t[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4256ff9-5fcc-4231-bc57-360df512996d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T23:33:27.465531045+00:00","session_id":"1cad5ce3-bc37-44b2-8f98-8a1c2733f2a6","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/social-auto-upload/requirements.txt","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a9045fb-5921-415c-94ba-18d27c6eef4b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:30:54.808222002+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 10000 > /tmp/gh_trending.html && [...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4a5e1881-e6ad-4079-a84b-261f72e330b2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:01.040496348+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 40000 > /tmp/gh_trending_full.htm[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6de61441-8e85-46a7-ae8b-5809eb12783a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:17.228465239+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 /dev/stdin <<'PY'\nimport requests, re, html, json\nfrom pathlib import Pa[...redacted 1332 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cd8eb120-cf4c-4869-bcfc-2c7833182abe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:22.012244715+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\ntext = Path('/tmp/gh_trending_full.htm[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a2a0275-06f9-4534-8ecb-cc5d49489fa3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:26.849408713+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 80000 > /tmp/gh_trending_big.html[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0fcc3f19-99b9-4d46-8c4e-10917acf4563","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:31.482111538+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\ntext = Path('/tmp/gh_trending_big.html[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6af8767d-3a27-4de4-9abc-78017c7c0e63","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:36.043221950+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html 2>&1; wc -c /tmp/gh[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2930ed4-005e-457a-8eb5-7c64411abfd0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:39.253271507+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\ntext = Path('/tmp/gh_trending.html').r[...redacted 159 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3838b2c-c6de-4c1b-853d-864d12db50be","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:44.461111638+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\ntext = Path('/tmp/gh_trending.html').r[...redacted 100 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b3dfba9-f381-4021-a9dc-0c185fa16573","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:31:50.526296422+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, re, html, json\nfrom pathlib import Path\ntext =[...redacted 1337 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"29468cd0-ee49-460d-b9a8-1546a89932b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:32:10.499722345+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Block","rule_ids":["invalid_host_chars","confusable_domain"],"command_redacted":"python3 - <<'PY'\nimport re, json\nfrom pathlib import Path\ntext = Path('/tmp/gh_t[...redacted 388 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"972d3aa4-dca5-4c1e-a8d2-cfa6bdffd445","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["invalid_host_chars","confusable_domain"]}
{"timestamp":"2026-05-31T06:32:18.209155825+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"text=open('/tmp/gh_trending.html').read(); out=[]; [out.append(chunk[...redacted 210 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3cf52beb-89a6-4dc9-ac6a-ab2591a6bac7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:32:39.530408378+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ddb97a6-8da7-4e88-aab2-3fc3883a14a0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:32:45.342400954+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/metadata_enrich.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bfa53319-d7f4-4ea6-bcbc-db8bd9d0caa8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:33:01.666814783+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16a98780-dfb7-40e7-a8ca-6f0202a78b9e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:33:14.830725053+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"37a9070f-a1c8-48c5-8247-bcc74ec27a70","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T06:33:31.483513235+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"rm -f /home/ice/parse_trending.py /home/ice/fetch_metadata.py /home/ice/fetch_re[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42d21223-db3d-4663-98a0-de818b57cb01","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:10:41.608868530+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"uv tool install markitdown","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00c0db57-66ee-4cff-aba4-54f8cc35ab61","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:10:45.123983174+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"markitdown --help","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"95b8118a-8f2f-4b7f-81d1-c47cfa676148","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:10:46.743601524+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"markitdown --list-tools","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a6da2296-1377-4d24-b633-63ee894a21f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:10:49.822002831+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/hello.txt <<'TXT'\nOlá, este é um documento de exemplo para testar o[...redacted 85 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"967f77b1-d5a4-42ee-9102-b8b6ee454dd0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:12:43.115765193+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"markitdown \"https://www.youtube.com/watch?v=jNQXAC9IVRw\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74c48842-c10f-4343-8fea-7888c30a70fc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:13:45.123659902+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"export OMP_NUM_THREADS=1 && markitdown \"https://youtu.be/USmG-RXYzd8?si=Upu0wWSo[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1014396b-93e1-4820-ae3d-85d502320642","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:20:42.498772057+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/repos/OpenMOSS/MOSS-TTS\" | head -n 20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dfc4ee5b-4556-416b-8e7e-503522512223","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:20:52.529843713+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/repos/OpenMOSS/MOSS-TTS\" -o /tmp/moss_tts.json &[...redacted 316 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62825b99-686a-4a94-baa6-0540a78c7223","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:22:49.967073746+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"which edge-tts || true && edge-tts --list-voices 2>/dev/null | grep pt-BR | head[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a1b142e-ef35-4692-a5f9-85caefdabbff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:22:53.152269231+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 -m edge_tts --version 2>/dev/null || true && python3 -c 'import edge_tts[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"08539842-8e65-4b32-bf62-aa4d59a93e79","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:22:56.184070435+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"hermes config get tts.providers 2>/dev/null || true && echo '---' && hermes tts [...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23f374eb-9b04-4592-8fc1-d82ef595af83","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:23:10.468983988+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 -m edge_tts --list-voices 2>/dev/null | grep 'pt-BR' | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9abe7bae-146d-4b85-94e6-18aa9bbf52ee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:23:13.958991993+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom hermes_tools import read_file, terminal\ncfg = read_file('~[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a6ac2b76-50fd-44a3-838b-af29fd858cee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:23:19.149927119+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nfor p in [Path.home()/'.hermes/config.[...redacted 186 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"80da09b3-6a64-4a5e-95f5-b98213059f93","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:23:32.166007160+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, urllib.request\ntry:\n    req = urllib.request.Reque[...redacted 212 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3bf8eef-31c6-4a2f-80f0-d4650888e30d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:27:31.735639993+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import edge_tts; voices = [v for v in edge_tts.list_voices() if v['L[...redacted 125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"efe5ee7b-cd3c-4cd8-a049-5df8671947fc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:27:37.640900445+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"uv tool install edge-tts","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25c6faca-0b33-4f64-af4b-4e56223f3ef6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:27:43.834420079+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"edge-tts --list-voices | awk -F'|' '{gsub(/ /,\"\",$2); gsub(/ /,\"\",$3); if($2 ~ /[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"def55a78-c4dc-4dc5-a483-34c399765592","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:27:47.761212716+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"edge-tts --list-voices 2>/dev/null | grep -E 'pt-BR|ShortName|Neural' | head -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9c421ec0-7d0e-490d-9b77-c6a7559ecb2a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:27:57.620159720+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Warn","rule_ids":["lookalike_tld"],"command_redacted":"curl -s \"https://edge-tts.pages.dev/voices.json\" -o /tmp/voices.json && python3 [...redacted 224 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16edd529-d4e8-48b5-9e92-7d314165108a","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["lookalike_tld"]}
{"timestamp":"2026-05-31T10:28:14.490580079+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"sed -q '1{/^[^{]/q};$q' /tmp/voices.json; wc -c /tmp/voices.json || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eaf37737-0e0c-4ec4-a854-a8c699e172e5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:28:18.439163099+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import json; data=json.load(open('/tmp/voices.json')); voices=[v for[...redacted 152 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dabcdfbd-0898-4888-b82a-26281ff7bf7b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:28:23.466451306+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"head -c 500 /tmp/voices.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"501dae4a-8331-434c-a50e-cb882fc4257a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:28:27.937793828+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"edge-tts --list-voices | grep 'pt-BR' | head -100","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0bb38929-9f3b-4546-8256-6db5514618eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:28:40.025119517+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"edge-tts --voice pt-BR-FranciscaNeural --text 'Testando a nova voz. Meu nome é [...redacted 124 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"29c40dd2-5292-45cc-a570-38a95ce4b9c6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:29:59.888030780+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"edge-tts --help | sed -n '1,120p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7158068-2925-43b3-8158-8cb8a64a8e9c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T10:30:03.561939517+00:00","session_id":"3c663303-678c-46f6-8a93-3e0d1b981108","action":"Allow","rule_ids":[],"command_redacted":"edge-tts --voice pt-BR-FranciscaNeural --text 'Testando a nova voz em velocidade[...redacted 159 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0c8d19d9-872c-4963-b37d-faa79d5fefce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T11:24:05.711879921+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/repos/langfuse/langfuse\" -o /tmp/langfuse_repo.j[...redacted 291 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30d8f0f0-7072-4478-8910-87f2c6a39f62","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T11:24:07.160545624+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://langfuse.com/\" -o /tmp/langfuse_home.html && head -n 80 /tmp/l[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4e60a00a-0fe9-4e9d-9ff5-3cc35f51e126","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:27:21.934486417+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"OMP_NUM_THREADS=1 markitdown \"https://youtu.be/bfCzUzaKpdA?si=zh2D-mxSFM1q2Td1\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"94e687b3-8556-438c-b686-7f7be1ffc431","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:27:29.546024839+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"uv tool install yt-dlp","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1057865-53fe-4690-98fe-5432298a0273","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:27:35.708887009+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"yt-dlp --print-json --skip-download --write-subs --write-auto-subs --sub-langs p[...redacted 117 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a6d51ac-9d0f-4f75-a0e2-7c9a543d961a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:27:48.376328725+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"bash /tmp/get_subs.sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb70795d-8003-4da4-b968-bb93cec8018b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:27:54.606703285+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport subprocess, shlex\ncmd = [\n  'yt-dlp', '--skip-download',[...redacted 315 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"137d21ab-a89f-478f-acac-66345b319b77","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:29:43.468917399+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://html.duckduckgo.com/html?q=hermes+agent+workspace+hyperframes+j[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dc742c7a-0490-45d6-acdc-301259a28c55","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:45:49.354103941+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=hermes+workspace&sort=star[...redacted 205 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a406bf9b-d828-4144-85d4-78fd82b49685","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:45:54.846292422+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/repos/outsourc-e/hermes-workspace\" -o /tmp/works[...redacted 536 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"04cdfc28-d87d-4912-bd1e-66adf0b38cab","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:46:50.039621197+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://raw.githubusercontent.com/outsourc-e/hermes-workspace/main/REA[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"89d0c995-2068-4cd2-be15-68e57b9b451b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:47:03.277927797+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"command -v node || true; node -v || true; command -v pnpm || true; command -v he[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69870446-934a-4b5b-b02b-317e383aa8e7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:47:12.292259550+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"curl -fsSL \"https://raw.githubusercontent.com/outsourc-e/hermes-workspace/main/i[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d9be86a-91fa-4a71-8510-12fef4dcd406","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:47:25.340239806+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"ss -ltnp | grep -E '8642|9119|3000' || true; hermes gateway status 2>/dev/null |[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb0cfcd0-c497-491c-bb6c-f8dd004fa72c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:47:31.987873613+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"bash /tmp/workspace_install.sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"71d7a32c-de3a-4c74-80f1-310cd8fcd36a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:47:43.695253348+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"corepack enable && corepack prepare pnpm@latest --activate && pnpm --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3023b36-7158-45d5-b00b-db21f8eb11a3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:47:49.326085459+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"ls -l $(dirname $(command -v node))/../lib/node_modules/corepack/dist/corepack.j[...redacted 102 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"269ff2f0-a399-4369-a745-f4c643848f70","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:47:57.763618006+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"npm install -g pnpm && pnpm --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c2ac62ef-5253-41c7-9bc1-8be7891a6043","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:48:04.110702544+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"npm root -g && npm prefix -g && ls -la \"$(npm prefix -g)/bin\" 2>/dev/null | head[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a36401b6-1556-4e74-a846-79f729254aff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:48:09.107513755+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/home/ice/.hermes/node/bin:$PATH\" && cd /home/ice/hermes-workspace [...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b523c3e2-0d8f-45a7-bb45-7c423357c947","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:48:44.751338776+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/hermes-workspace/.env | sed -n '1,220p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67d553df-808b-49bc-9e65-a9d58904d49b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:48:50.980807736+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport urllib.request\nfor url in ['http://127.0.0.1:8642/health[...redacted 245 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b8c2f2d5-9b75-4f5f-b181-63fc8f7fb288","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:48:57.689336063+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"hermes config set API_SERVER_ENABLED true && hermes config set API_SERVER_HOST 0[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c483b9f-bf73-4aa4-9071-a1706f4a1126","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:49:02.180119726+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway restart","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df91a29e-04e1-4efe-9c0d-eedfb8102478","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:49:13.969479348+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway status && hermes gateway --help | sed -n '1,220p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a38c6255-98b0-4b07-aba5-b054c54a95c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T12:49:23.010359310+00:00","session_id":"b75124eb-9777-4b5b-a8b6-b502998cf6c9","action":"Allow","rule_ids":[],"command_redacted":"kill 4590 || true && sleep 1 && ss -ltnp | grep -E '8642|9119' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"05c12c3c-d8e2-44ef-9924-7d41a61381d7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:33:20.967301986+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/repos/jacob-bd/notebooklm-mcp-cli\" -o /tmp/nb_re[...redacted 730 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6de20c8-508b-46a2-9c87-f10f99c43b55","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:33:28.391814664+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"curl -fsSL \"https://raw.githubusercontent.com/jacob-bd/notebooklm-mcp-cli/main/R[...redacted 94 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7f23bd6b-875f-44d9-b3de-8f2cfdd1f91e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:33:59.924474359+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"uv tool install notebooklm-mcp-cli","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"584721c2-f194-4b01-8be9-3319bc590213","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:34:07.244683882+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"uv tool list | grep -i notebooklm && nlm --version && nlm --help | head -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5b31d23d-3aa0-46fb-9591-6f42a99a090d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:34:52.077487959+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"nlm login","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53ff99d3-a34c-40e2-aa38-cd0e97445f0d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:43:24.601915566+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/home/ice/.hermes/node/bin:$PATH\" && edge-tts --voice pt-BR-Francis[...redacted 211 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"051f39ff-6f95-4ca4-899f-271ce7b231e8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:44:06.447609405+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"kill 4590 2>/dev/null || true && sleep 1 && ss -ltnp | grep -E '8642|9119' || tr[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7fdcf101-e025-4765-82bd-8a0c0cfde770","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:44:13.092896526+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"API_SERVER_ENABLED=true API_SERVER_HOST=0.0.0.0 hermes gateway run","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dd7add98-3e1b-4cbc-b69d-9e1a70aed503","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:44:19.964907017+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway run --replace","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d6c33ab-5bcc-45be-9557-82558027048b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:45:38.670421437+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes config set tts.edge.voice pt-BR-FranciscaNeural","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c5658032-64c5-425c-9e4f-3ad042135800","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:45:52.602446709+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ss -ltnp | grep -E '8642|9119|3000' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63f5930e-61b3-4726-99ec-da4c1eb29dce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:46:28.734790804+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ps -fp 4590 || true && hermes gateway run","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"415aea75-e83b-4c04-90c5-2a9bfc494072","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:46:33.736081812+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"kill 395 && sleep 2 && hermes gateway run","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"73c3d7fa-73f2-4a83-83e3-a6520265cbbf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:46:41.405359359+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway run --replace","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1bd577f4-92ac-4441-941b-c79ea5e8d219","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:47:45.555499897+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"echo '--- hermes gateway status'; hermes gateway status 2>/dev/null || true; ech[...redacted 245 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44605a3e-83e9-4cb9-9a4b-19d2fd381b05","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:50:12.778035354+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ps -ef | grep -E 'hermes.*gateway|gateway.*run' | grep -v grep | awk '{print $2}[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2cab4c86-c7a5-4f71-9ca6-225ef0541477","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:50:18.936209398+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway restart","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dadbddd1-9dc0-427b-b073-643052a54791","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:54:16.158776603+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -E '[h]ermes|[g]ateway' | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b291e28-4c84-40fe-9425-dd510798170e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:54:21.233735696+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -E '[h]ermes|[w]orkspace' | head -40 && ss -ltnp | grep -E '8642|9[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df6b0a00-7c9f-4f97-af8f-8130ac8b2b20","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:55:11.393823799+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"kill 634 || true && sleep 2 && ps aux | grep -E '[h]ermes|[g]ateway' | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"558b5d72-29a9-42c4-b406-322e1f06afe2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:55:20.624350796+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway stop","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01e28d4c-489e-41cd-964a-1479bbe31bf9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:55:54.532828609+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -E '[h]ermes|[g]ateway' | head -10 && ss -ltnp | grep -E '8642|911[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8cf6531a-e27c-411d-a4ed-a57f5e018c1a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:55:58.552209292+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"kill -9 634 2>/dev/null || true && sleep 2 && ps aux | grep -E '[h]ermes|[g]atew[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d5a0d5a7-1876-4035-8ad6-044d9791b12e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:59:38.382452732+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes config get api_server_key 2>/dev/null || true; echo '---'; hermes config [...redacted 95 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"75792f3a-5c2d-4a23-9145-bd2c26a4a92a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:59:42.938891079+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway run","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"134a9d1e-9a80-4a85-96af-dac92f5a1974","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:59:48.525763108+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway stop || true && sleep 2 && hermes config set API_SERVER_ENABLED t[...redacted 72 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aeff6fc4-34c1-4d9a-a393-b73a4187e281","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:00:15.962692331+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway run --replace","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33b5af43-9165-4574-990a-921f5dac9729","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:01:45.359751588+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"kill 634 2>/dev/null || true; sleep 2; ps aux | grep -E '[h]ermes|[g]ateway' | h[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d2e53e3-cbe0-494d-ac1f-9a95a0795354","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:01:53.682174952+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway status && ss -ltnp | grep -E '8642|9119|3000' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67ac600e-36ef-44f5-a7af-e03d07b584b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:01.216201076+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ps -p 828 -o pid=,args= | head -40; for f in /proc/828/fd /proc/828/net/tcp /pro[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"099a9d30-b3a3-426a-85a5-6a54bc9f43b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:07.000409530+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/.hermes/.env | grep -E 'API_SERVER|API_|HERMES_API|DASHBOARD' || t[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dde35b16-f97d-4e27-b6d3-5b82123642d1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:11.253642181+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"sleep 3 && ss -ltnp | grep -E '8642|9119|3000' || true && curl -s http://127.0.0[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d969bd3b-ac9d-4538-98b9-d3dd325e5b51","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:20.457283176+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"grep -i 'api\\|8642\\|9119\\|error\\|exception' /home/ice/.hermes/logs/*.log 2>/dev/[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a9939bd1-89a3-4447-8a3d-dddbb1bfbb25","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:25.344334853+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import secrets; print(secrets.token_urlsafe(32))\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da244713-020e-4f96-b18b-745225dd0662","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:40.144929575+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport os\n\nhermes_env = Path.home()/'.[...redacted 944 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ac1f2a0-c81a-4e7c-b7d2-fa4bbe7ef0b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:44.499073247+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"kill 828 2>/dev/null || true; sleep 2; ps aux | grep -E '[h]ermes|[g]ateway' | h[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53f0365d-e7cb-46a8-864a-cdfde32355d4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:02:55.091105579+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"kill 828 || true; sleep 3; ps aux | grep -E '[h]ermes|[g]ateway' | head -20; ech[...redacted 124 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1f1f691-5022-4414-9523-395d7a4b2bc7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:04:02.157010241+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"pkill -f 'hermes gateway run' 2>/dev/null || true; pkill -f 'hermes.*gateway' 2>[...redacted 287 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c18029d3-317f-43cd-92f6-b7d1934237ef","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:04:14.987904432+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"pkill -f 'hermes gateway run' || true; sleep 2; ps aux | grep -E '[h]ermes|[g]at[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"95ef16ea-d915-4d21-aeef-dab7847b4415","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:04:28.912943627+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -E '[h]ermes|[g]ateway' | head -20 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b21b87a7-252b-4c8f-91a9-32302b1586b0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:08:04.929686209+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"grep -E 'API_SERVER_KEY|API_SERVER_ENABLED|API_SERVER_HOST' /home/ice/.hermes/.e[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5dbde0b4-36fa-453b-a13a-2a0e952e6198","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:08:12.093580158+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway run --replace","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d0dc665-1a85-4044-923c-d89158409f05","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:10:22.151176534+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:8642/health | head -c 200 || true; echo '---'; ss -ltnp[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67ff0b22-10fc-4402-9b77-b5b0c7b7c756","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:10:31.543244361+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/hermes-workspace && export PATH=\"/home/ice/.hermes/node/bin:$PATH\" [...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a788d91d-3ca7-4c1d-ac7d-9ec42cd228d7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:12:00.663133101+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49e32e42-383c-4e03-9407-8d3ae933c766","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:18:58.339771231+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hermes dashboard","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b6d21b7-842c-4a22-b582-18d651f5722f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:20:10.031899478+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"hostname -I | awk '{print $1}'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4072ce61-ef8e-4a55-857b-30a0a9af4da8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:37:23.964444200+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/workspace -maxdepth 3 -type f | head -n 50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c94601a-f7af-41a6-96b8-d67e848aa51d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:37:25.011676417+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/workspace -maxdepth 2 -type d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7748afe6-2d82-49e3-8a6a-a4d41afddba0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:37:35.710495476+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/workspace -maxdepth 3 -type f -o -type d | wc -l","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab82eceb-e582-4a92-9dd2-74360f6ce786","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:37:40.702264689+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/workspace && echo '---' && find /home/ice/workspace -mindepth 1[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b11d9a1c-5a93-4175-a3a8-c75cceb21e26","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:37:46.016181990+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"stat -c 'type=%F dir=%n perm=%a owner=%U:%G' /home/ice/workspace && echo '---HID[...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a8d3ef98-6602-42e3-9727-3b4cad3dd0af","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:37:47.064421879+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"find / -maxdepth 4 -type d -wholename '/home/ice/workspace*' 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c04e5899-825c-4aaa-af3b-cb1d4cc840c5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:38:33.191498309+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"228c9313-d201-4093-aba7-a27d32fb304b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:38:59.392202718+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"39aa03ed-26b7-4834-80fb-f5f9b3568527","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:39:10.330313436+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 152 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"908685fe-756f-4014-ab79-0a3b83fa466f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:39:19.288734626+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_repo_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9659217a-2216-48d5-bbf1-30fd6d0fe1a6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:39:42.770873303+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"458af142-b237-401b-9229-cfaa9d9c9c50","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:39:59.021571088+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"cat <<'PY' > /tmp/gh_fetch_meta.py\nimport requests, json, time, sys\n\nwith open('[...redacted 1419 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2c6b7600-93dc-4e61-8921-f0abfb6b613c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:40:15.091762958+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"cat <<'PY' > /tmp/gh_readmes.py\nimport requests, json, base64, time, sys\n\nwith o[...redacted 1249 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e9a207cb-0587-47b8-9722-d05096918a59","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:40:28.816544903+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"cat <<'PY' > /tmp/analyze_readmes.py\nimport json, re, sys\nfrom pathlib import Pa[...redacted 2451 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"af53393c-d3ef-4266-a755-856b5341e253","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:40:42.403895776+00:00","session_id":"d04e9e05-69a0-42e4-9b01-61283d0eed73","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/gh_analyze.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3557358-ce18-4faf-bcbd-fc318ec40ed8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:45:55.077860855+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s -L \"https://github.com/trending\" -H \"Accept: text/html\" 2>/dev/null | he[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa7bee32-b9c6-4ad0-873b-547ddb2aef24","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:01.411096062+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s -L \"https://github.com/trending\" -H \"Accept: text/html\" 2>/dev/null | gr[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ebbc6583-e467-4206-9aec-b6e8d97ab034","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:07.104113878+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s -L \"https://github.com/trending\" -o /home/ice/.hermes/kanban/workspaces/[...redacted 531 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d9813e55-c16a-43b4-9413-212ecc54acd6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:10.423115550+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s -L \"https://github.com/trending\" -o \"/home/ice/.hermes/kanban/workspaces[...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e93c8ca-1b3b-4408-9568-e2a7beed12dd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:17.426887272+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"grep -oE '/[A-Za-z0-9._-]+/[A-Za-z0-9._-]+' \"/home/ice/.hermes/kanban/workspaces[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0c22ab4a-3f11-46f6-ab41-f67ce84a6d63","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:22.988991560+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"grep -oEi 'href=\"(/[^/\\\"]+/[^/\\\"]+)\"[^>]*>' \"/home/ice/.hermes/kanban/workspaces[...redacted 142 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bb140aa-3433-43d2-9739-14443bc30ed8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:31.890987895+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/.hermes/kanban/workspaces/t_aec705f1 && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a77c142-6556-4b88-bc49-1a49658a8922","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:37.347936731+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"grep -o 'href=\"/[^/\"]\\+/[^/\"]\\+\"' \"/home/ice/.hermes/kanban/workspaces/t_aec705f[...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79244eb8-aedf-4c8a-97fa-b33e201fca80","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:44.445094237+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s 'https://api.github.com/search/repositories?q=stars%3A%3E50+pushed%3A%3E[...redacted 89 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"55b72742-0238-44b7-843d-81d23bdb7fc9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:46:55.632490861+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PY'\nimport re\nfrom pathlib import Path\nfrom html import unescape\nhtm[...redacted 748 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb47ba59-f229-4df8-8692-dab315329e80","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:47:10.264030403+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s 'https://api.github.com/search/repositories?per_page=100' -H 'Accept: ap[...redacted 151 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d33ba1fe-1554-4aab-90a4-7dc704192bda","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-31T21:47:15.277969781+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"which jq gh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b871f7d0-4976-4fef-9a33-87a2a3119272","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:48:50.167565624+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://github.com/trending\" | head -n 200","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47e5c0ab-72e7-4e39-8370-6fbf3ba42bbf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:48:57.916183326+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://github.com/trending?since=weekly\" | rg -n '<article|<h2|data-ho[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da07fc95-d821-494a-91fb-863278b99e9f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:49:09.172313042+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://github.com/trending?since=weekly\" | grep -E '<h2[^>]*class=\"[^\"[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5b08f3ba-e1e0-4712-8c28-edcf250c1aaa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:49:22.938768774+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/.hermes/kanban/workspaces/t_aec705f1 && curl -s \"https://github.com[...redacted 167 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed1984c5-618d-4e5b-8302-c37f1b1d83f7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:49:36.289846962+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/.hermes/kanban/workspaces/t_aec705f1 && python3 -c \"\nimport json, u[...redacted 1913 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a6beb3e5-da8e-478b-a5b3-cfae5418cc30","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:49:46.920321875+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/kanban/workspaces/t_aec705f1/fetch_repos.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3af46e3-6ea7-43c3-9805-2fb2055157ad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:50:01.745316390+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/kanban/workspaces/t_aec705f1/fetch_repos.py || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"76886882-f7f4-493c-9238-83b80cfbf9e6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:50:05.245199584+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/kanban/workspaces/t_aec705f1/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"165996e1-fc99-41e0-9dfb-cbb29e62fce6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:50:23.672810554+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/kanban/workspaces/t_aec705f1/build_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42f6ff0f-d409-4dea-9b64-be5a074b43d1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:50:35.837180540+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/kanban/workspaces/t_aec705f1/build_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee866e40-c92a-4994-8342-4658df8057e0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:50:45.017977799+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/.hermes/kanban/workspaces/t_aec705f1 && python3 -c \"\nimport urllib.[...redacted 539 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"647ff997-6d5b-476f-a51d-c3f3a7db24ab","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:51:23.202138111+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"ls -l /home/ice/.hermes/kanban/workspaces/t_aec705f1 && echo '---' && find /home[...redacted 82 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"80e1bb3e-dba0-4874-880e-24899319f83e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:51:31.709184408+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/.hermes/kanban/workspaces/t_aec705f1 && cat > build_report.py <<'PY[...redacted 2260 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fef8624d-5958-485c-93df-2f86ab2e2f8c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T21:51:35.974221619+00:00","session_id":"6cb73f3c-759b-4fc9-9f65-15672a3f0b16","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice/.hermes/kanban/workspaces/t_aec705f1 && python3 build_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"588aed72-357e-4d1b-9cb5-f06da7ab71fa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:30:34.889321389+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 20000 > /tmp/gh_trending.html && [...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1cce4984-6999-44aa-b443-e9992c993d19","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:30:37.303467245+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re, json\np = \"/tmp/gh_trending.html\"\ntxt = open(p, \"r\",[...redacted 1351 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"68393bc2-3c8b-42d1-b442-208c90c8ffbc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:30:40.223447501+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re\ntxt = open(\"/tmp/gh_trending.html\", \"r\", encoding=\"u[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c22b4acf-59e4-4972-9a5c-cad0bb7c59af","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:30:46.413725293+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"coro=$(curl -sL https://github.com/trending -o /tmp/gh_trending.html && wc -c /t[...redacted 225 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7591c32d-b883-4467-8955-5eb2022ea87e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:30:51.658752433+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re, json, html\np = \"/tmp/gh_trending.html\"\ntxt = open(p[...redacted 1651 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8fca3eb-4c84-468f-a0cd-4cbdecc79c68","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:30:58.124741693+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests, json, time\nrepos = json.load(open(\"/tmp/trend[...redacted 1345 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0c44c556-21c7-4454-bb0a-40b06468c77d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:31:10.008767118+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests, json\nmeta = json.load(open(\"/tmp/trending_met[...redacted 170 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c155b6ed-942a-4a62-8990-dba79b2ed010","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:31:20.260906958+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport os, requests, json\nmeta = json.load(open(\"/tmp/trending[...redacted 472 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"86f26b55-7679-4d49-83bb-2ac0d64850c9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:31:29.335704219+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport os, re, base64, json\nmeta = json.load(open(\"/tmp/trendi[...redacted 1003 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d154840b-549b-4c7f-a21e-5fc42cfbb5bc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T06:31:35.463387574+00:00","session_id":"49a30cea-50b6-42ac-937b-b31507558040","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json\nmeta = json.load(open(\"/tmp/trending_meta.json\"))\n[...redacted 161 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec133b53-1dd5-42bb-b5a5-038b6d0fcdc6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-01T22:59:57.371271538+00:00","session_id":"aaaf5c72-0a22-434f-9ff7-84574fe17c99","action":"Warn","rule_ids":["schemeless_to_sink"],"command_redacted":"hostname -I && curl -s ifconfig.me","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d6a66b6-41df-4445-a3a8-f653f130be8d","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["schemeless_to_sink"]}
{"timestamp":"2026-06-02T00:45:38.267983371+00:00","session_id":"aaaf5c72-0a22-434f-9ff7-84574fe17c99","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"514d2bd1-9ea0-4e4f-9071-9e5bc6bf4deb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T00:46:13.301591580+00:00","session_id":"aaaf5c72-0a22-434f-9ff7-84574fe17c99","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests, re, json, base64, time\nses = requests.Session[...redacted 6086 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49b35f0f-f946-441a-a62e-9a100ad39272","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T00:46:40.962097567+00:00","session_id":"aaaf5c72-0a22-434f-9ff7-84574fe17c99","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests, json, re, base64\nses = requests.Session(); se[...redacted 2261 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1f4c8f5-e9d4-424f-80df-c570c49906ea","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T00:46:49.283485838+00:00","session_id":"aaaf5c72-0a22-434f-9ff7-84574fe17c99","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests, json, re, base64, re\n\nses = requests.Session([...redacted 1206 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19a784f0-10ef-42bc-99d6-f90081391dcc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T00:46:59.228262274+00:00","session_id":"aaaf5c72-0a22-434f-9ff7-84574fe17c99","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests, json, re, base64\nses = requests.Session(); se[...redacted 2187 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2d6ad211-1302-4470-b5b2-e634146f96b3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T00:47:08.145575982+00:00","session_id":"aaaf5c72-0a22-434f-9ff7-84574fe17c99","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests, re, json\nfrom html import unescape\nhtml = ope[...redacted 1101 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ce6b36a0-bc98-4905-b447-d358c85585cb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:30:25.781394621+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 20000 > /tmp/gh_trending.html && [...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36df53aa-cb61-4231-9d70-a6f218778f43","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:30:32.392979415+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7be841a4-a73e-4057-931f-342f38c36d47","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:30:45.833900541+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"54952037-1cd6-4cb6-bc4d-5cde11991498","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:31:04.909621208+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0142720f-a5e3-46e7-a3c8-d584b30b1bca","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:31:16.248952804+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"73745ac2-44db-4a5f-b5cd-43f7a7980e7b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:31:19.275546040+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, json\ndate = \"2026-06-01\"\nurl = f\"https://api.g[...redacted 246 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc6b957a-1593-4149-9d00-e9c12100d04d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:31:27.722538787+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, json, time\nfrom datetime import datetime, time[...redacted 986 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"31fc16e4-07d7-4d4b-bc81-5af3d0b94e53","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:31:34.584432675+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /tmp/gh_trending_repos.json | python3 -c \"import sys,json; repos=json.load(s[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa5df9df-fa9f-41aa-8a30-5f776495d28a","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-02T06:31:38.275192563+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"which jq || echo 'NO JQ'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62408794-1ae6-4923-93a9-f1cdd4c0ba15","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:31:42.939705463+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"grep -E 'full_name|description|language' /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3ae4dbe7-b9e2-41a4-bd1b-4cfedf396411","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:32:07.037147682+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, json, time, os, base64\n\nwith open(\"/tmp/gh_tre[...redacted 1701 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"29aff50f-5a39-4de3-a3d0-b0b0fdfa7f6a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:32:17.675394400+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fcff4562-6946-4659-bb18-2b534a991580","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:32:51.215987773+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html') as f:\n    text = f[...redacted 325 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9154adeb-d0ff-4bde-9c17-090f2940720c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:32:57.374301867+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport re\nwith open('/tmp/gh_trending.html') as f: text=f.read()\n# [...redacted 121 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b4ed840c-32ee-4215-9328-28b86c9f97cf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T06:33:17.590786742+00:00","session_id":"08ee7b47-a9a8-4dd3-8c7f-6205544c4c06","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"43b56895-d7b0-4e86-b117-2d1d8232b4bf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:30:20.415235760+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 10000 > /tmp/gh_trending.html && [...redacted 51 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d305a524-b5e8-4128-a88a-dba74e14798e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:30:26.823977615+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport re\nwith open('/tmp/gh_trending.html') as f:\n    text = f.rea[...redacted 267 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03975158-2f51-4098-a091-cf19b13c238f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:30:30.791238789+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"65c634df-cee0-4de3-9006-aa1ccd2fe3b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:30:33.257517050+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && echo \"Saved $(wc[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be611512-4508-4a0f-91dd-f30a53a6c365","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:30:43.079508861+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62e90289-9709-421d-92f4-24ab90bcee57","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:30:52.603596918+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dbb5c368-0092-4de3-8447-c0ac15634479","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:31:06.117073102+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7ac768f5-12f9-443e-9d4d-da6314e4a766","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:31:13.035177170+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending_full.html && wc -c /tmp/[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b4f38c98-415c-4e23-8926-10f64fd2e1a6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:31:20.758942980+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"09885eff-f71e-4cdd-9e81-d3e72a6c718e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T06:31:36.896172323+00:00","session_id":"e83a0532-e8ed-43cd-aee3-b37c0b2e21d0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91c21a88-9acc-477e-85e0-f43b8566ea0f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:31:04.521487424+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 20000 > /tmp/gh_trending.html && [...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc46604d-25a2-4089-ab29-3e611b119a5f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:31:08.213731299+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a174c4d7-1489-434b-bc3c-f98dae639539","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:31:13.553872618+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && echo \"OK\" && wc [...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d2e43428-afce-44a2-a8b6-74178a5e19a7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:31:28.565434099+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1524f812-151e-4f6a-a842-0d82a8ef24b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:31:40.737666935+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"045c039d-a4dd-4ff2-aa73-12c2ce1a10a0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:31:57.554103435+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"08925191-4451-43cb-9ee9-4545abb835e0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:32:33.602476837+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/analyze_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63fc437f-ee6d-4cd1-b84d-95194d3cfeef","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:32:56.417121805+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"02260e8d-988a-468a-8116-b96e739a3036","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T06:33:25.655633727+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/render_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"321a3a39-5a01-4719-a45e-9db5f597dfba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:28:49.455388099+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s https://api.github.com/repos/opendataloader-project/opendataloader-pdf |[...redacted 491 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"196a57fc-711e-40bd-bfe5-75f8a7cd4ade","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-04T10:31:03.424266472+00:00","session_id":"c7201414-f3ec-4868-b338-f734442c5641","action":"Allow","rule_ids":[],"command_redacted":"docker --version 2>/dev/null || echo 'docker not found'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b03f9c86-6bc7-416d-98fe-7f7329e66970","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:31:09.204372455+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"java -version 2>&1 || echo 'Java not found'; which javac 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"586f207a-bff9-4f41-8f6c-ed6e7f254652","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:31:16.681160784+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://raw.githubusercontent.com/opendataloader-project/opendataloader[...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7536f3b-452e-429b-b305-7de177562d88","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:31:24.787308566+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"python3 --version && uv --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"140ce9c0-8320-40ef-8ecb-3a640116ace7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:31:31.487216426+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"uv venv /tmp/venv-odl && source /tmp/venv-odl/bin/activate && python -m pip inst[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f4816dc5-a877-4a65-b1cf-6033381465ba","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:31:37.280771594+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && uv venv odl-env && source odl-env/bin/activate && uv pip install open[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fd4cc12f-6cc8-4fa3-a08a-2852a240625c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:31:45.627908119+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"source /tmp/odl-env/bin/activate && opendataloader-pdf --help","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"18071edf-8c46-43e9-a5ee-809c0b6dad35","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:32:08.734408459+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"source /tmp/odl-env/bin/activate && curl -sL \"https://www.w3.org/WAI/WCAG21/Tech[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1f0720ae-9700-4975-82ae-35670778f254","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:32:13.842279725+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"source /tmp/odl-env/bin/activate && opendataloader-pdf /tmp/sample_real.pdf -o /[...redacted 114 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"124f4009-2c1c-4373-a20f-5398a0502fcb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:33:03.586366592+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"apt-get update && apt-get install -y --no-install-recommends openjdk-17-jdk","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6028b97b-a8f0-4513-8588-d73b3dcf88bd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:33:09.606047888+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get update","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ccd90142-c00a-4a76-8e49-9f782bb0f94f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T10:33:15.586417495+00:00","session_id":"8f1e0974-ea8a-4924-be99-f3f7a3bfee7a","action":"Allow","rule_ids":[],"command_redacted":"which su || which pkexec || which doas || echo 'none'; id","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e21ba428-1e2c-4c13-a1a5-e43015247084","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:30:55.955985882+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 10000 > /tmp/gh_trending.html && [...redacted 51 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d6569d0-c70d-4daa-8328-ff967812ebc2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:05.547939093+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2497fb9a-4b56-40e3-89b9-b12e9616751d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:12.600346775+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"wc -c /tmp/gh_trending.html && grep -o 'Box-row' /tmp/gh_trending.html | wc -l &[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e0b83b0a-4509-4cb5-9a5c-47070197d12e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:16.724429080+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"DATE=$(date -d yesterday +%Y-%m-%d 2>/dev/null || date -d '1 day ago' +%Y-%m-%d)[...redacted 190 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"27bb3c7d-c99e-413d-ade0-aaf246c4849a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:26.418954092+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/select_repos.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"499f0881-a1f3-4819-99a4-d19342974854","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:36.838794540+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/select_repos.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"667d6f12-16d9-4b07-8aee-ddfbb408560a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:49.176821088+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"ls -l /tmp/*.{json,py} 2>/dev/null | tail -20 && python3 - <<'PY'\nimport json\nfr[...redacted 577 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aa576b03-4a91-4242-b848-f3e429976732","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:51.621857938+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c1903cd7-e520-491a-b955-296e90d3d908","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:55.305215843+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests\nprint('requests', requests.__version__)\nPY","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"09fc16c1-b1f3-42b4-aed5-f7ab9eb63199","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:31:59.429383518+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"which python3 && python3 --version && python --version 2>/dev/null || true && ls[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a428ce75-0999-453d-b3a7-12371587b5f7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:32:02.462199176+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"/tmp/odl-env/bin/python -c \"import requests,re,json,base64; print('deps-ok')\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c695a6dc-b722-4e7b-9ba3-2833f9e07cd8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:32:06.296061227+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"ls -l /tmp/odl-env/bin/python* && /tmp/odl-env/bin/python -c \"...\" 2>&1 | tail -[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2c7fd9a5-becd-4a0a-b6c4-dcbd2757f010","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:32:16.941520548+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"which python3 && python3 --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"157173ba-6e43-4644-8047-bcbb68b072c1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:32:57.686034271+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"find / -name \"requests\" -type d 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"122d2170-c01f-474f-a5c9-82608f594fd6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:33:10.009181422+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/check_requests.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1f816eb2-5fd5-451a-9349-808a2b70a889","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:33:32.121703953+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2aecad52-156b-4eb9-9e02-f71637192755","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:34:08.657785905+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json\nfrom pathlib import Path\nrepos = json.load[...redacted 98 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b1f8b632-f9da-43e9-bbe6-80161b93f09c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:34:25.546639312+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/render_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"39eaf937-52e6-4ebc-bb05-248faa688c06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:34:53.151211914+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json\nfrom pathlib import Path\nitems = json.load[...redacted 206 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6e86a0fc-b821-4428-9da8-3c2df94aab32","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T06:35:02.657748037+00:00","session_id":"137306bc-e85c-4d9e-b8b4-b361fc6aa583","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json\nfrom pathlib import Path\nitems = json.load[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9a3dd88c-911a-4512-98dd-2990b0b54cbf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T12:00:14.971135690+00:00","session_id":"8a1bc1c5-35f9-4924-bb7a-cb02bcc23dd0","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending -o /tmp/gh_trending.html && wc -c /tmp/gh_t[...redacted 80 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c485226-bd24-4a0e-96f2-b98246d7da41","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T12:00:24.216529415+00:00","session_id":"8a1bc1c5-35f9-4924-bb7a-cb02bcc23dd0","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, re, html as html_lib, json\nfrom pathlib import[...redacted 1958 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1265816f-171c-407c-ac82-c8f9485b0a69","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T12:00:36.404566383+00:00","session_id":"8a1bc1c5-35f9-4924-bb7a-cb02bcc23dd0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py && python3 -m json.tool /tmp/trending_parsed.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19d9c898-ef3b-4948-9d6b-7869093399de","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T12:00:53.119047944+00:00","session_id":"8a1bc1c5-35f9-4924-bb7a-cb02bcc23dd0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_metadata.py && python3 -m json.tool /tmp/repos_metadata.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81fbe0db-a4a2-4a86-9e59-c3924ca552b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T12:01:12.095091574+00:00","session_id":"8a1bc1c5-35f9-4924-bb7a-cb02bcc23dd0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py && python3 -m json.tool /tmp/readmes_index.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"77957d72-4af4-40e8-ac41-56d9b400f8e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T12:01:35.258475398+00:00","session_id":"8a1bc1c5-35f9-4924-bb7a-cb02bcc23dd0","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/lead_extractor.py && python3 -m json.tool /tmp/lead_extractor.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23495db3-c863-46ea-98c2-edc224be9484","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T22:56:39.913324812+00:00","session_id":"fd0c7931-1015-4bc2-9ab0-8cc38c66a215","action":"Allow","rule_ids":[],"command_redacted":"hermes skills list","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c9e9cb6-b0c2-42e3-a44b-59f744d4e736","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:30:36.558984151+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d5cc1c29-df47-4b30-aa48-470133e87181","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:30:48.559134061+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py > /tmp/parsed_repos.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06b61d50-e14c-4845-8e78-ef25a2613863","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:30:53.633679614+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"ls -l /tmp/parsed_repos.json && tail -n 5 /tmp/parsed_repos.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3dce7e82-7283-47cc-9f9b-5c30d801061e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:31:10.024455555+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"220cb14a-26dc-4db5-8955-0caeeecc7eff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:31:19.890252790+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23cee65d-eb28-4c19-8fb1-1600bd4f0ba1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:31:44.533011187+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7bc55595-e34e-4d0c-b3ee-02d7dadf79a0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:31:58.204362104+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5b0d93cb-fda0-4e57-acbe-9609ba8d7296","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:32:20.840599494+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bd0348f1-a80f-4292-bea6-503c64498274","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:32:54.972811486+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1586edb9-9958-4ab8-9751-ca406b525f47","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:33:06.634261165+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json\nwith open('/tmp/readmes.json','r',encoding[...redacted 148 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ae91c529-3ff6-4b91-88b0-e8ce0c489603","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T06:33:23.491497542+00:00","session_id":"f2664644-8a69-4599-a567-c5d9cb576b51","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00877edd-f420-4fc1-bf21-9b8755a50a91","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T17:53:41.943975858+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Warn","rule_ids":["lookalike_tld"],"command_redacted":"hermes mcp add composio --url \"https://connect.composio.dev/mcp\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bc0a70c9-ccb5-4b90-b22d-c3912c85081f","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["lookalike_tld"]}
{"timestamp":"2026-06-07T17:54:20.886799723+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"hermes mcp list","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e855772d-7e92-4259-abb5-7a249c520356","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T17:54:26.588088428+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"hermes config path && hermes mcp --help","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf9ffd71-a527-4227-890e-924937ba581c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T17:55:25.088211223+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Warn","rule_ids":["lookalike_tld"],"command_redacted":"hermes mcp add composio --url \"https://connect.composio.dev/mcp\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b81c9970-e4c7-4bc0-855f-f863816c79a4","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["lookalike_tld"]}
{"timestamp":"2026-06-07T18:04:12.042008110+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Warn","rule_ids":["lookalike_tld"],"command_redacted":"sudo tee /home/ice/.hermes/config.yaml > /dev/null <<'YAML'\nmodel:\n  default: st[...redacted 2206 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dbae4cb1-f9be-4093-869d-e5cbb723cad5","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["lookalike_tld"]}
{"timestamp":"2026-06-07T18:04:26.432963412+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/config.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"29009022-2790-48c2-a922-2ddfff92593d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:08:05.993015773+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"hermes mcp add --help","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"76f62884-686a-4589-89f4-c3ee657aca8c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:09:54.635778387+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Warn","rule_ids":["lookalike_tld"],"command_redacted":"curl -fsSL https://composio.dev/install -o /tmp/composio-install.sh && head -n 5[...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c84345da-d959-4f74-9a99-be38adf98240","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["lookalike_tld"]}
{"timestamp":"2026-06-07T18:10:04.979595810+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"bash /tmp/composio-install.sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cfbbbcde-28b8-4656-adb4-5b81a9e87ce7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:10:12.767348517+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"apt-get update -y && apt-get install -y unzip zip","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"566571b3-fcc2-421d-9006-393f1a46eb73","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:15:15.131792241+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"hermes mcp list","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91002f93-1728-409d-bfa9-371ee4be8082","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:16:00.707436303+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 4 -type d \\( -name hermes-agent -o -name 'hermes*' \\) 2[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53627f6a-2759-436e-a363-74106aa70406","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:16:54.878803161+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"grep -Rni --include='*.py' -e 'mcp' /home/ice/.hermes/hermes-agent/hermes_cli /h[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2206fd70-ab26-44c3-83f1-88b4c2e94918","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:20:05.638711689+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"grep -n -A8 '^mcp' /home/ice/.hermes/config.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49731bdd-2768-4471-92e7-602c7dab5d25","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:20:13.974527441+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"hermes mcp list","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5ea6058d-dd35-4ee6-954a-f62dc079213d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:23:00.245859990+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/cron/output/ || true && find ~/.hermes/cron -maxdepth 2 -type f[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f471267-c9d8-4329-b063-2d727c1aaf21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:23:09.606800187+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/cron/output/d626a1e54056 -maxdepth 2 -type f -printf '%T@ %p\\n' |[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d0d2db7c-32da-450f-9f7f-da267adb87e7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:27:17.564683276+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"grep -R -n \"github-trending-research\" /home/ice/.hermes/skills /home/ice/.hermes[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fd93b47f-7685-438d-af1d-f4925b989c39","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T18:28:10.864710512+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/.hermes/cron/output/d626a1e54056/2026-06-07_06-34-01.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe74b6af-52bb-42f4-9866-1d9b8c2b3ee5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:46:31.814807364+00:00","session_id":"1cea0188-dbd3-4c7f-8625-a2c4c43ba8b1","action":"Allow","rule_ids":[],"command_redacted":"curl -fsSL https://raw.githubusercontent.com/decolua/9router/refs/heads/master/s[...redacted 76 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0281115a-65ba-4375-84f3-560d89997572","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T22:49:57.121896156+00:00","session_id":"0882d7c7-6116-4959-b635-b181494c3e7c","action":"Allow","rule_ids":[],"command_redacted":"curl -fsSL \"https://api.github.com/repos/Ram-Raghav-S/cua\" -o /tmp/repo-info.jso[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3978fa7c-92e5-49e4-8d69-afc6aced3474","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T22:53:05.670556554+00:00","session_id":"0882d7c7-6116-4959-b635-b181494c3e7c","action":"Allow","rule_ids":[],"command_redacted":"curl -fsSL \"https://raw.githubusercontent.com/trycua/cua/main/README.md\" | head [...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90f1087f-26cb-470c-b229-cd3d05a42950","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T00:15:13.802710296+00:00","session_id":"0882d7c7-6116-4959-b635-b181494c3e7c","action":"Allow","rule_ids":[],"command_redacted":"sudo cat /home/ice/.hermes/config.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9cdb544b-be14-4443-b6e0-f38887212b4b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T00:15:31.972270577+00:00","session_id":"0882d7c7-6116-4959-b635-b181494c3e7c","action":"Allow","rule_ids":[],"command_redacted":"tmp=$(mktemp) && cp /home/ice/.hermes/config.yaml \"$tmp\" && sudo sed -i 's/^prov[...redacted 297 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3287a962-34ac-4f22-8a03-b76d7fe17a02","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T00:16:53.428282876+00:00","session_id":"0882d7c7-6116-4959-b635-b181494c3e7c","action":"Warn","rule_ids":["raw_ip_url"],"command_redacted":"cd /home/ice/.hermes && hermes config set providers.custom[0].name openai-compat[...redacted 242 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"168f8503-cd94-4627-978d-2a96fc555894","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["raw_ip_url"]}
{"timestamp":"2026-06-08T00:19:22.140142530+00:00","session_id":"0882d7c7-6116-4959-b635-b181494c3e7c","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && hermes doctor","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e37fcc66-edb7-44f1-b479-5430b0d2c2f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:30:58.355268117+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 15000 > /tmp/gh_trending.html && [...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d9e2b46-5803-43b3-9541-5e561e946289","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:31:02.218030488+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"grep -c '<article class=\"Box-row\"' /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e694f2f-88d3-418a-b1fb-df9fae7b7115","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:31:05.552878129+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"curl -sL 'https://api.github.com/search/repositories?q=pushed:2026-06-07&sort=st[...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3ac70673-2691-45f4-b339-f7b8116215f4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:31:12.112734091+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json\nwith open('/tmp/gh_search.json','r') as f:[...redacted 253 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"68f6c610-90f1-4056-ad80-9b90146ea64d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:31:17.728445794+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport requests, json, time, sys, os, re\nrepos=['publi[...redacted 795 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ccdd2962-6679-4eb1-ac5f-bcd8b3c5bfa0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:31:37.051225254+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport requests, json, time, base64, re\nrepos=['public[...redacted 1148 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"234296b7-9b0b-4c0e-99fb-75defc534109","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:31:57.358140432+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json, re\nwith open('/tmp/gh_meta.json') as f: m[...redacted 535 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"426ac562-04cb-4c5f-8337-314f77f89614","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T06:32:06.283679602+00:00","session_id":"99eb434f-f0c7-472a-8f85-b48596858c94","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport requests,re,urllib.parse\n# Count repo issue/nam[...redacted 692 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"413b1db9-656a-4dd3-93fd-c1cc3a0d95de","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:30:45.740425558+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 20000 > /tmp/gh_trending.html && [...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d8d3efbe-ed64-4998-beff-906063793bfd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:30:50.754837035+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -c '<article class=\"Box-row\"' /tmp/gh_trending.html; grep -c '</article>' /[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a1c286e-8219-4957-9c41-1136aaa0da77","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:30:56.581138423+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"curl -sI https://github.com/trending | head -n 1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e03371a-aed0-4ad5-88fe-13e4d12ea293","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:31:01.808278249+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending_full.html && wc -c /tmp/[...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dac41e0f-af6a-4f84-9e56-e4cc29a9960a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:31:16.615316114+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c1035c73-a88a-47bb-9438-82e2fec7b6ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:31:35.490743775+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe7a470a-a164-4d88-aeaa-a4bbdff2683d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:31:54.420826552+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fd3f8136-ce44-4dcc-9886-cebfeca2af67","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:32:27.963528762+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4ec90af-d88a-417b-94c8-da0e5d3a7843","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:33:30.264116093+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/render_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67e3b5e1-2c30-4135-8fbe-10760daab22e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:33:35.624033890+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"sed -n '1,120p' /tmp/trending_report.md; printf -- '---END---'; sed -n '1,120p' [...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4acfcd70-8d25-4dca-b4a4-757101127c73","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:34:00.751051462+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/render_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d3a10ee-14b9-4dfe-a022-d5fef4ec1e54","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T06:34:34.938608855+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/trending_report.html <<'EOF'\n<!DOCTYPE html>\n<html lang=\"pt-BR\">\n<hea[...redacted 6879 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"640608f1-83cd-45fa-9f91-f9c2c904a292","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:14:07.310774136+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending | head -c 10000 > /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"51c94d3f-29f8-4c54-9291-b5a5d5756a60","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:14:13.269697804+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50085b51-e7e8-455d-9c99-3551fa2c22f6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:14:34.124382594+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"tail -n 40 /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99faf9c2-b21d-4f76-bb50-a93eb8cb8c83","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:14:48.413616284+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"448433ef-3599-4af0-8fe9-c178963e0003","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:14:56.391519993+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -n 'Box-row' /tmp/gh_trending.html | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f4f8dd7f-f22f-4ef0-970a-d17aee35ccae","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:15:02.178326870+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -o '<article class=\"Box-row\"' /tmp/gh_trending.html | wc -l; grep -o 'spons[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e95a2e3e-d155-4144-95a0-0d64dd75a3f0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:15:06.485010666+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"wc -c /tmp/gh_trending.html; grep -i 'trending' /tmp/gh_trending.html | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff3d77bf-8a52-4b2d-97fc-de42803111bf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:15:11.890305941+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7127acff-8480-4c55-98a1-2a5c14fddb65","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:15:25.816889667+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7852a3e2-6533-41c0-8bd9-bf25922537c5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:15:48.926536911+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -o '<article class=\"Box-row\"[^>]*>.*?</article>' /tmp/gh_trending.html | he[...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"08cb4f5d-74c7-45cb-8280-9e33e9b3d44d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:16:40.214483192+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/prepare_repos.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1712ed9a-46bf-4e44-a3bd-cf0624e8dff8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:17:12.906836956+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c40b0c6-3c7e-4e79-b6d8-29a533f91c6b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:17:39.350885026+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d26dc08-6aeb-4d3a-b63e-894b7a1fa832","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:18:08.662189978+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3a792d1b-cd2a-4bd3-bdf6-cb0c29c00db1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:18:16.777220996+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9bfcf3e2-d9f0-43c5-a5fd-135451d3e11d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:18:18.926130606+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"sed -n '1,220p' ~/.hermes/cron/jobs/d626a1e54056.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63b7357b-008c-4daf-b0b5-d595ed433ac8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:18:37.275084823+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/build_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"58b2a2e4-50cb-4d78-aae1-7de3e580a9b4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:18:57.279039841+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes && hermes cron list && HERMES_HOME=/home/ice/.hermes hermes cron li[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"07abf517-8021-459c-b83c-2989961aebc8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:19:07.451804456+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom hermes_tools import read_file\nimport json\nr = read_file('/[...redacted 100 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"57ba0ef8-6d97-4c93-a6b2-209684dab476","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:19:07.781145209+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/render_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3733c77a-1608-451b-8e34-0715e6c8076e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:19:14.233262971+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/cron -type f 2>/dev/null | head -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4917daee-ec9a-4e99-a3c4-0af793cb7c6b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:19:27.507895036+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f694eb5e-ebd4-4254-988a-d179e1c1a4fe","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:19:33.549319053+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -n '<article class=\"Box-row\"' /tmp/gh_trending.html | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d5ba8e9d-357f-4a2b-8519-2354f99fbccd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:19:54.506465155+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"09942ea2-a9e3-436f-ad9f-ddf54a68c748","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:20:03.495553256+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -n -A4 -B4 'stargazers\\|/stargazers' /tmp/gh_trending.html | head -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b0b8a07-a448-46e0-a617-c6c2368a5df9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:20:23.547901853+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, re, json, html\n\ndef main():\n    with open('/tm[...redacted 1676 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e8d17b0-e0d0-46d4-8a0e-ef5eec396139","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:20:30.449105326+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -n -A120 'mvanhorn/last30days-skill' /tmp/gh_trending.html | sed -n '1,140p[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9d98020-0b6f-4f0c-8747-547220d0849e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:20:40.308011188+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html', 'r', encoding='utf[...redacted 334 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed721de5-3d9d-47d9-aca8-337a4f2d94f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:20:50.108042946+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 237 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01976414-9a7b-40d5-acef-3fffb2534fad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:20:56.431099571+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 210 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"182e2ede-fa6c-42de-b95e-150d351849d7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:21:05.141386568+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 385 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"630e4ff4-7359-4775-a24d-bb6030cb69a4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:21:18.040229306+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\npattern = re.compile(r'href=\"/' + re.escape('mvanhorn[...redacted 498 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eba22230-2428-49d8-b68d-32cc6fe8c2f6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:21:22.209296057+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 -c 'import re; m=re.search(r\">\\\\s*([0-9.,kKmM]+)\", \">35,780</a>\"); print[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7a00e07d-d674-408e-b026-798de3b9e3bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:21:57.757463427+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\ns = '>        35,780</a>'\nm = re.search(r'>\\s*([0-9.,[...redacted 102 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7354b00a-936b-4390-b6ee-6d41c74fba94","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:22:04.162571055+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nanchor = \"\"\"<a href=\"/mvanhorn/last30days-skill/starg[...redacted 498 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c32e2e7c-8a30-4907-b228-20929daf2a13","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:22:10.209838794+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nanchor = \"\"\"<a href=\"/mvanhorn/last30days-skill/starg[...redacted 591 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"305bf3b1-25aa-43a6-9e45-8e42e887cb65","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:22:20.043165138+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nanchor = \"\"\"<a href=\"/mvanhorn/last30days-skill/starg[...redacted 705 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"821914a5-5cf1-42dc-a164-a0158374a37f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:22:29.360955720+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nanchor = \"\"\"<a href=\"/mvanhorn/last30days-skill/starg[...redacted 524 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4faeedea-8223-451d-b582-66d552efcb3d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:22:38.836016309+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\npattern = re.compile(r'href=\"/' + re.escape('mvanhorn[...redacted 534 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bce3dd9-9b99-47c1-90ed-cfc53485b7e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:22:50.931875861+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nname = 'mvanhorn/last30days-skill'\nsafe = re.escape(n[...redacted 578 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dee99d60-73b8-41b8-a730-463b2d503107","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:22:58.779627145+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 178 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67e2f146-18d3-4997-955b-7861e0e7aa94","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:23:30.681658594+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bfaaf756-ccd5-4697-a010-3930d2e3eaea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:36:01.145568486+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nwith open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 292 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5e3b865a-1dc3-4d74-8bdd-bd53fc3fc1d6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:36:12.716268345+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nwith open('/tmp/gh_trending.html','r',encoding='utf-8',errors='[...redacted 169 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"743d3c0d-5bdd-45d1-a431-e5f99588bb70","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:41:51.308927297+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport sys\nprint('python', sys.version)\nprint('pep668', __impor[...redacted 109 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0bf58f53-a50a-4aa4-a05b-ebdf7e4e16b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:41:52.372693424+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"uv --version && which uv","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5e43ab68-ba35-4d77-8bad-55ad22bd13e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:42:02.918914429+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip show camoufox 2>/dev/null || echo \"not installed via pip\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"13b6cd33-37d8-49c4-abd0-a5625fd3a5ad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:42:03.995897513+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"which playwright 2>/dev/null; python3 -c \"import playwright\" 2>/dev/null && echo[...redacted 61 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3d2c9fc4-ff9d-4885-b468-d3317189bfb8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:42:49.900076790+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"uv pip install camoufox","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5fd70639-2ad9-41c4-bcd7-1c98abc8b151","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:42:59.899515695+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport sys\nsys.path.insert(0, '/home/ice/.hermes/hermes-agent/v[...redacted 74 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b8174d06-1720-4179-a413-7bd72cbb732e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:43:01.056375118+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"uv run python3 - <<'PY'\nimport sys\nsys.path.insert(0, '/home/ice/.hermes/hermes-[...redacted 81 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5330314-b073-4f8b-b7a4-6a9dbeaa4fd2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:43:53.301143320+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"816bbeea-6ad1-47d5-a14b-11d9cbf8cc4c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:43:58.292711625+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"head -n 200 /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"584773ec-a916-4609-b2bd-657dc75422ae","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:02.169929261+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -oE '<article[^>]*class=\"Box-row\"[^>]*>.*?</article>' /tmp/gh_trending.html[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dfd95a70-3989-450e-bad9-1ea8b79df018","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:03.512206941+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/.hermes/hermes-agent/venv/lib/python3.11/site-packages | grep -i ca[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c389a31-b9f3-477b-90ec-81850ecab013","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:07.891592809+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -n '<article' /tmp/gh_trending.html | head -n 5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cee4b34d-931d-47ba-9fdf-ce24c7fe28bf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:09.291451136+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/.hermes/hermes-agent/venv/lib/python3.11/site-packages/camoufox","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c2a12fcc-790e-450b-8197-7342fd930697","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:17.080236975+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"playwright\\|chromium\\|browser\" /home/ice/.hermes/hermes-agent/venv/lib/[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03c6715a-d5de-42b0-b930-14c559f06a0b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:19.245001062+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"sed -n '3118,3178p' /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6bbbd5d-ce4b-4731-b820-dd2fe61a65c4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:20.818286408+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -A5 \"from\\|import\" /home/ice/.hermes/hermes-agent/venv/lib/python3.11/site-[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"384af5a1-72d1-4c70-8057-baaa1b97d061","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:30.924126727+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re, json\nwith open('/tmp/gh_trending.html','r',encoding=[...redacted 1524 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"915ed0b7-b24c-48a9-a1d6-56acaaa8c570","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:32.518263787+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -A15 \"class Camoufox\\|def __init__\\|def close\\|def get\\|def with_new_contex[...redacted 161 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aacef500-02b1-4692-956d-d3fe5d036ab8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:35.797091538+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\ntext=open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 202 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e379c5a3-7e80-4fb9-ada3-126ef6e6dcab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:40.473612219+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"grep -A20 \"class NewBrowser\" /home/ice/.hermes/hermes-agent/venv/lib/python3.11/[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee4cd865-b304-4bd7-9f63-ed72676a85da","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:44:56.090941711+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"cat <<'PY' > /tmp/parse_trending.py\nimport re, json, html\n\ndef main():\n    with [...redacted 1974 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48521175-7223-4083-9e12-c0c2ed1599fd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:45:16.398508726+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"cat <<'PY' > /tmp/parse_trending.py\nimport re, json, html\n\ndef extract_delta(b):[...redacted 2043 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0cc7619a-c279-4516-bda8-c8449c093631","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:45:24.840951970+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\ntext=open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 380 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b28ec98-eb79-435a-8d57-ea95d96ebf90","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:45:31.911523924+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\ntext=open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 380 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"58d8d35e-67f0-41d4-bc9a-b6a31515d188","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:45:37.562134552+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\ntext=open('/tmp/gh_trending.html','r',encoding='utf-8[...redacted 338 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d92e09a1-c96a-4c81-b331-2f45afeccb91","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:45:50.041007719+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"cat <<'PY' > /tmp/parse_trending.py\nimport re, json, html\n\ndef clean(text):\n    [...redacted 2110 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9ea0b0c2-a1f2-4f4c-8ffa-de4b331fbe0b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:46:04.100914028+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"cat <<'PY' > /tmp/build_report.py\nimport json, html, datetime\nfrom pathlib impor[...redacted 2746 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"415aaf9c-17e4-4119-b2d6-ffba54b2dc44","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:48:20.569483449+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"uv run python3 /tmp/camoufox_demo.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"552e7194-d4b4-44b3-86cb-906d344aec8a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T09:49:14.613039581+00:00","session_id":"c2e2b64a-8797-42d3-be5a-a07b5334f360","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get update -qq && sudo apt-get install -y -qq libgtk-3-0","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f94bf55b-232c-4212-b370-07c6f513ed6a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T06:31:14.583445716+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"208ddf5b-e59e-4435-9b71-b3da2f91b178","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T06:31:33.441938791+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b6e95eda-9e9a-4ce6-8a8a-a779f20fa9f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T06:32:02.072993528+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 -c \"import requests, json; print('ok')\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"487bce3a-9880-4e95-8cf2-d6090d75d277","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T06:32:13.471606822+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"436ed745-1517-4fc1-9341-f6a155b0efcd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T06:32:30.065140062+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7df6ed8-3d59-47dc-875f-5b5d8715bdf2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T06:33:35.511558877+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/lead_extractor.py > /tmp/gh_report_extracted.json && cat /[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3184130-5c79-4c07-a6d6-ee00ee2c47bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T06:34:27.966852653+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/render_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4e3b76ef-06c9-4f06-b909-02f575244ae7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:46:34.505944221+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"curl -s -L -o /tmp/gh_trending.html https://github.com/trending && wc -l /tmp/gh[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"093b3adf-35ea-4d4c-87ca-2b2e7c84e5bf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:46:41.772358541+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"TODAY=$(date -u +%Y-%m-%d); YESTERDAY=$(date -u -d \"yesterday\" +%Y-%m-%D); echo [...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2eda9217-19de-48f1-b63c-1bd5a1922caa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:46:55.217575265+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"date -u +%Y-%m-%d && date -u -d yesterday +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab101adf-3a7b-45c2-bca3-4954444f09d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:47:41.225506373+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3eca67f4-9dcf-48fa-894a-ff0fb7ea2fc6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:48:20.691673404+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b365910f-97d7-4e89-9567-a4d885f25e2c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:48:37.720496654+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0bfa7715-d4e3-47c2-8582-e7500f2305bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:48:58.030045671+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/summarize_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c5804eb7-05ac-416c-bf35-a1a8b508c274","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:49:09.469900251+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/summarize_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ddf948f-efee-40d7-8eff-d56dc768a6fe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T08:49:25.039801169+00:00","session_id":"11649da2-a7cb-40f8-acc2-42104dce62cb","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json, urllib.request\nfrom pathlib import Path\n\n[...redacted 200 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"58a39308-b2f9-4a48-ab63-75a720868e52","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:30:17.813220622+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f0601c8b-aca4-481b-9259-66d1cf9cc409","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:30:34.100060536+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"82061718-f6ed-460b-8246-c970f56c6ec2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:30:50.268795614+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"date -d yesterday +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad3ccea8-8a74-43c9-8234-fc50f23873a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:31:03.039981711+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"grep -o '<article[^>]*' /tmp/gh_trending.html | head -n 5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d9c9291-d105-41d4-8469-787005630d16","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:31:06.612004396+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"sed -n '400,460p' /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"863fa80e-e97f-4e33-994a-668b293434e5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:31:26.945230345+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"32480cce-3b6c-4c46-a2a9-82bf7f6503d3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:31:45.359364198+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14ce8648-4734-4605-8b0c-1a40fd7fd678","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:34:00.051632934+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7daadf74-23db-4d65-b2ca-231198cab32a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:34:52.056320436+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fac248dd-c1e8-421b-853d-057790bd600a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:35:43.064293161+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/search_fallback.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98ad4035-6314-4738-b75b-1104250b09c9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:36:59.235458387+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"wc -c /tmp/trending_readmes.json 2>/dev/null; true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4bb82dce-404e-4135-a917-d495703de1a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:37:06.938505585+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"40b47709-ac53-4db7-a330-f4e359dd13d4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:39:04.637941616+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb3b73a3-93f3-4f54-adbe-3df83ac797a0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:40:07.682004260+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01d2230e-b878-4f4e-b7e9-14153d5773f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:41:08.393986788+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8dfd8de4-d573-436b-854c-436e198cf15c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:41:59.779168712+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81816b4c-a3ba-4923-a06b-5df43c55ab56","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:42:06.332596698+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"rm -f /tmp/lead_extractor.py; true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c20a6a10-3b4e-4245-ae6b-29016071e6ef","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:43:57.814526068+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - <<'PY'\nimport json\nfrom pathlib import Path\nitems = json.load[...redacted 89 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5927b2a4-48f9-4903-a3d7-397406402e24","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T06:44:57.953317202+00:00","session_id":"23aa0db7-3129-4159-a8a2-67611bdc1bea","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/lead_extractor.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3667215f-850f-4235-8fb2-ff0216e92d28","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:31:02.574468170+00:00","session_id":"1d30a3f0-612c-4162-b778-9b1fc1763e1e","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -o /tmp/gh_trending.html \"https://github.com/trending\" && wc -c /tmp/gh[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0557272b-3bdf-4377-9636-9bef43de79c2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:31:11.613865122+00:00","session_id":"1d30a3f0-612c-4162-b778-9b1fc1763e1e","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e809cfa-719c-4e2a-86a7-69d0f311f28f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:31:31.400071187+00:00","session_id":"1d30a3f0-612c-4162-b778-9b1fc1763e1e","action":"Allow","rule_ids":[],"command_redacted":"rm -f /tmp/gh_trending.html /tmp/trending_parsed.json /tmp/parse_trending.py /tm[...redacted 96 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef0b552d-fa43-4152-ad5c-69a537791dd7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:31:35.312156669+00:00","session_id":"1d30a3f0-612c-4162-b778-9b1fc1763e1e","action":"Allow","rule_ids":[],"command_redacted":"true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"39355dc0-540f-4054-ab47-8de41df42c22","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:31:07.271601952+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -A \"Mozilla/5.0\" https://github.com/trending -o /tmp/gh_trending.html &[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"02317219-2d04-4b7b-b363-c62d4929cc09","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:31:20.071280679+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8119a12b-768b-4bd4-83b0-d401c21f2268","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:31:32.432690700+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"date -d yesterday +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"efeed10e-86b9-4932-81e3-1fc2b38b9563","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:31:53.964973625+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 - << 'PY'\nimport requests, json\ncandidates = [\n\"addyosmani/agen[...redacted 1160 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3a6146a6-e14e-46d4-abe2-4df27cde41f7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:32:11.679171273+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"75c11b39-bd0a-4d46-be2c-6029ad3fd75f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:32:54.812914183+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp | tail -n 30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9338932f-2e2d-4802-9633-15a09c97ee76","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:33:26.863323228+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_report_items.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c2a8889b-b7da-4f9e-815f-0dd09198c6e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:33:38.044294472+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_report_items.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64930354-9f36-4290-97f2-4bf34faf1b31","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:33:50.814304260+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/render_report.py && cat /tmp/report.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"581820f6-d579-4a62-979a-e47d3f704b5d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:34:14.604985562+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1e244f3-9ff3-40b1-8726-0eceb34dbb1f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:34:27.369513499+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/render_report_items.py && /usr/bin/python3 - << 'PY'\nfrom [...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24bd212d-dcae-4664-83ac-8e8704281bb0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:34:31.923411673+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_report_items.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5e77d651-2e9c-4e3e-be2c-3de68e94ebf1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T06:34:40.750979483+00:00","session_id":"b4eda9b9-4981-4e69-9e18-1dff4f88beb9","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/render_report_items.py && /usr/bin/python3 -m json.tool /t[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c569c26-cab8-4e29-87ea-301aa7e9802d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:13:28.177929289+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"ls -lth ~/.hermes/cron/output | tail -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fbfb36c4-0a44-43fb-8868-13aaa4f5809e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:13:32.247321465+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/cron/output -maxdepth 2 -type f -printf '%TY-%Tm-%Td %TT %p\\n' | [...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7ba49e5-289b-4412-bf42-0ea09f1ffbeb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:14:43.460979996+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/cron/output -maxdepth 2 -type f -newer ~/.hermes/cron/output/d626[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1121736-5c69-4530-89c6-bd4b9a004b9e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:14:49.495383576+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/cron/output -maxdepth 2 -type f | sort | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9ff7d46c-765e-4730-b559-c72baffb3119","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:15:02.487390460+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/cron/output -maxdepth 2 -type f -newer ~/.hermes/cron/output/d626[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7333b7fd-4a12-4393-b3bb-a36ab5ecfc8a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:15:09.216105555+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1929a47-53e1-4b57-9b98-81158803542c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:15:15.020034352+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/cron/output/d626a1e54056/2026-06-13_06-34-45.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30244c48-955e-42f0-bc00-378fe3e1320f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:15:29.054994623+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e62a524-a104-4efb-9c1c-e6c88a3a64b0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:15:43.933756876+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e921f01-eb05-4a5b-9baa-f7c58ecb0ac8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:16:20.619934969+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/search_fallback.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be7d42f5-e9bd-41d2-a37b-52134665b52f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:16:31.180317860+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b3aa012c-5a40-486a-b4b9-4ccb15dc0a33","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:16:39.710393540+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re, json\nwith open('/tmp/gh_trending.html','r',encoding[...redacted 215 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6c5a2a7-54a7-4857-afca-02fe15f0ae87","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:16:53.114224195+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending_v1.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e611162-b148-474d-95f8-3a9b14d05369","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:17:03.819495718+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json\ndata = json.load(open('/tmp/trending_valid.json'))[...redacted 111 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35ee9f8a-c1b1-4b5f-adb4-8d3ab4358966","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:17:11.100123918+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re\ntext = open('/tmp/gh_trending.html','r',encoding='ut[...redacted 118 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eb26ecac-621c-40db-9a7d-9053d9b81c21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:17:14.915314367+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"130d9a73-d235-461c-bc22-39d4fc8ed04b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:17:53.250019294+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nwith open('/tmp/gh_trending.html','r',encoding='utf-8',errors=[...redacted 526 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e869b6d-0227-4234-9755-4664d68fa351","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:18:20.659682011+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"230fda12-aee3-414a-a3b0-22bca3bf37f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:18:29.115255260+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re\ntext = open('/tmp/gh_trending.html','r',encoding='ut[...redacted 404 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0faeb111-411a-484f-9761-8fe28e42013a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:18:52.803890598+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/fetch_metadata.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d4162292-6a5c-4b46-9de0-0d29c030722f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:19:04.633428533+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport requests\nrepos = ['iptv-org/iptv','addyosmani/agent-ski[...redacted 438 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3959869c-3431-4af2-90b8-e50e9570e31a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:19:10.313777971+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json\nfor r in json.load(open('/tmp/repos_metadata.json'[...redacted 76 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"77b7a1b2-5291-4757-8140-b17bf20cabb6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:19:29.293411797+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp/*.py /tmp/*.json 2>/dev/null | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3dfc7d5a-15bc-42da-9942-94c4eb6ab6b1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:19:54.944679565+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/build_report_items.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01c1c913-81aa-46c5-b966-6fcd3b40ef6c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:20:24.812932113+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, os\nfrom pathlib import Path\np = Path('/tmp/trendi[...redacted 327 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b435e5b1-aea2-408a-9da6-28e4b742422b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:20:33.870044356+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_report_final.py && /usr/bin/python3 /tmp/build_html.[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e6df0a4-1b45-4f44-a9ff-c5efa6346d2c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:20:45.757801199+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json\nfrom pathlib import Path\nmeta = json.load(open('/t[...redacted 146 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c7c9d59-8619-472f-8e66-a5e29c715f79","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:20:48.900751948+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_html2.py && tail -n 40 /tmp/report.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26eac6f0-d2e4-49b7-b532-908c0c863478","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:20:50.860128443+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/build_report_items.py && ls -l /tmp/report_items.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f0e59be-fee7-49ed-a347-a734e8735f2a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:20:58.644084451+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json\ndata = json.load(open('/tmp/trending_parsed.json')[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f7d812a-a7a8-4380-9985-651dce0b5384","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:21:02.260691067+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_html3.py && sed -n '1,80p' /tmp/report.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16759931-fcb3-4d64-956a-fda0f77e69d1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:21:28.735562342+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/run_pipeline.py | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3e0f6f08-23fc-4e69-b2e7-6c7c0fa2ecd3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:21:44.557033708+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json\ndata = json.load(open('/tmp/repos_metadata.json'))[...redacted 424 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53506bb2-fca4-4fd0-992c-3b164333f804","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:22:01.058214416+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata2.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab2dc20b-a140-4c50-9d5f-8094a93abf1a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:22:38.606934526+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, datetime\nfrom pathlib import Path\n\n# Load what we[...redacted 1322 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a8a631a0-1982-4bf1-a364-233da6eb1f86","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:22:59.547834744+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, datetime, re\nfrom pathlib import Path\n\nitems = js[...redacted 826 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00b2bf6e-b002-41bc-b7ab-435ef2ed3339","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:23:50.269525607+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/step3a_discover_contact.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"85341037-c061-4b45-9dd5-2a87b96ca450","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:24:14.986942088+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, datetime\nitems = json.load(open('/tmp/report_fina[...redacted 1075 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"af926aab-c53b-4907-93a2-9c0970911e39","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:30:07.873306728+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes && grep -r \"model\" ~/.hermes/*.yaml ~/.hermes/*.yml ~/. hermes [...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"55ed07ae-cb5b-4b38-99b8-b4ee1ba1a9cc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:33:58.201093264+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes && hermes doctor","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed73ce50-7da7-448a-86e3-975144b0702f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:36:27.525859218+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes && hermes doctor","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8dc5e1de-8f1e-4b60-afde-b294edf73edc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T13:37:22.147929934+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes && hermes doctor --fix","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f99bd634-ea08-434b-9b22-825b43a726c5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T15:20:38.376596064+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"gws gmail send --help","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"04972c76-e5fa-476f-9800-cffef1f6a4a5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T15:27:23.374373783+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"uname -a && hostname && pct --version 2>/dev/null || true && qm --version 2>/dev[...redacted 51 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"51519043-166b-44fb-a98d-1824a484a5f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T15:27:29.091034406+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"ls -l /usr/sbin/pct /usr/bin/qm /usr/sbin/lxc-info /usr/bin/lxc-info 2>/dev/null[...redacted 116 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1df1d962-f634-4caa-aca0-8ec86cb0e666","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T15:29:20.981016192+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"cat /proc/1/environ 2>/dev/null | tr '\\0' '\\n' | grep -E '^(hostname|container|l[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"265927da-c832-449c-820f-8f65ce206740","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T15:29:26.210417545+00:00","session_id":"9a2ee35d-fc85-4a52-a8d2-01e5a58e09ca","action":"Allow","rule_ids":[],"command_redacted":"find / -maxdepth 4 \\( -type d -o -type f \\) \\( -name '*ct*' -o -name '*lxc*' -o [...redacted 43 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"38c09240-525b-44f1-a215-4170c6f5d609","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:37:05.314793900+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/github/references ~/.hermes/skills/github/templates ..[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b8f1605-d165-48a2-b286-5215816c9fa6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:37:33.923052050+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/skills/github/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ff3a500-67fb-4da3-b0cf-a5fae294457a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:38:31.158632079+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills/github/github-auth ~/.hermes/skills/github/github-code-rev[...redacted 207 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1a78661-8b2d-4e08-98cc-815067969a89","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:38:40.227300565+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills/github/ -maxdepth 3 -type f | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b540838e-d586-4cf0-9d9c-fff3d12f37a5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:38:41.284167906+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/github-trending-research/references ~/.hermes/skills/g[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"896fa8b4-1503-45b2-85e9-01ce13806fea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:38:57.160685312+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes/skills/github && \\\n  mv github-auth/scripts/gh-env.sh scripts/gh-en[...redacted 997 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a74eea25-2658-4d05-814c-5765683a7f6f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:39:06.676850830+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes/skills/github && mkdir -p scripts && \\\n  mv github-auth/scripts/gh-[...redacted 972 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5674501-f81a-402e-ab0d-d65b1639bc19","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:39:11.190116102+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes/skills/github && mv github-auth github-code-review github-issues gi[...redacted 97 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e940da43-a43c-42b5-85b7-2e0c69f20ccc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:39:18.381513408+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ | grep '^github-'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fea2855-a1f0-421e-ba49-c3a2320198c3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:39:39.142077136+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nmkdir -p ~/media-suite ~/note-management-suite ~/coding-agent-suite ~/kan[...redacted 202 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"535c4007-6b08-4bb9-a45a-403148d9439d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:40:26.220763986+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\n# Media suite - copy relevant skills\nfor skill in audiocraft-audio-genera[...redacted 466 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4e6ff95-e325-4a4e-b86f-714a17277b25","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:40:30.005935079+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 2 -type d -name 'audiocraft-audio-generation' -o[...redacted 122 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36bc0737-20f6-433f-a6d1-180f066fb4a8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:40:34.926481076+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nfor skill in audiocraft-audio-generation heartmula songsee gif-search; do[...redacted 218 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be4e521f-e0e0-422b-9aa3-ed6f73820d21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:40:39.102965962+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 4 -type d -name 'audiocraft-audio-generation' -p[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d23450a9-321b-4222-96ad-b46f5bb0e16e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:40:48.383550331+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\n# note-management-suite\nfor skill in notion obsidian; do\n  if [ -d ~/.her[...redacted 1012 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"11ba3068-71c8-442e-93e7-748becd9fba4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:40:52.966415024+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\n# Fix missing note-management skills\nfor skill in notion obsidian; do\n  #[...redacted 479 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bf9e5322-5c08-4581-9a9a-6fa6964d0b7f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:40:59.714640952+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 3 -type d \\( -name 'notion' -o -name 'obsidian' [...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6145bc5e-9c75-42e5-bcc0-e03fb7373ff8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:41:13.554685479+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\necho \"...\"\nfind /home/ice/.hermes/skills -mindepth 1 -maxdepth 2 -type d [...redacted 103 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d66877cb-e12b-49d3-b81d-a01f79390488","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:41:32.643471973+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nmkdir -p ~/quality-reliability-suite\ncp -ar ~/.hermes/skills/software-dev[...redacted 417 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3d885be9-690e-4345-b280-20138b5ec885","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:41:40.056487092+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nmkdir -p ~/note-management-suite ~/kanban-suite ~/coding-agent-suite ~/au[...redacted 1107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fa4601b-cba3-49ce-8020-810381a03710","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:42:18.729838231+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nfor dir in ~/media-content-generation ~/note-management-suite ~/coding-ag[...redacted 332 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"46c9a55f-850c-4646-b8e4-ee013f98e649","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:42:24.152902392+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nfor skill in architecture-diagram ascii-art ascii-video comfyui excalidra[...redacted 498 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c9fe919-c594-4acc-8ca9-61b98543488a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:42:34.289467608+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nmkdir -p /home/ice/.hermes/skills/.archive\nfor skill in github-auth githu[...redacted 292 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0d9c3129-0851-46be-ace8-004727c36895","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:42:39.323500311+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/.hermes/skills/.archive/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b29c5ed-a4ac-4ee3-9788-4609a13b89b9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:42:43.452300101+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\ncd ~/note-management-suite\nif [ -f SKILL.md ]; then\n  echo present\n  sed [...redacted 43 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c1a8d20-1507-43b7-a762-cab3ec793f5b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:42:52.374029820+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nmkdir -p ~/.hermes/skills/.archive\nfor d in note-management-suite kanban-[...redacted 303 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d76fe92-5282-45e5-b382-fbf9d4cc072e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:43:16.485351620+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\ncd ~/.hermes/skills/.archive\nfor d in note-management-suite kanban-suite [...redacted 351 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"de01d998-9e05-47b2-b75a-8929755090f0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:43:32.488320609+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\nrm -rf /home/ice/.hermes/skills/media-content-generation\nmv /home/ice/.he[...redacted 429 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5db91b66-170d-4d5b-8268-bccab57c7ebc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:44:57.121680308+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/.hermes/skills/ | sort && echo \"---\" && ls /home/ice/.hermes/skills[...redacted 81 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"51a28af6-851b-4e93-8184-310d06995187","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:07.065524253+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\ncd /home/ice/.hermes/skills\nmkdir -p github/references github/templates g[...redacted 1545 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f33fa332-6626-4997-a812-531da76b2f84","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:13.111111773+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"mv /home/ice/.hermes/skills/.archive/github-auth /home/ice/.hermes/skills/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7ba5397-f87f-4c35-9cf4-40da2d902390","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:14.174617756+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"mv /home/ice/.hermes/skills/.archive/github-pr-workflow /home/ice/.hermes/skills[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63df209a-2b76-4739-ae5f-3cb41f3e413e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:15.238301141+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"mv /home/ice/.hermes/skills/.archive/github-repo-management /home/ice/.hermes/sk[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"77f83a8b-095d-4448-a536-3e86e38cace4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:16.301712528+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"mv /home/ice/.hermes/skills/.archive/github-code-review /home/ice/.hermes/skills[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70ff64d2-b288-4b63-9233-47aae71ed632","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:17.376370541+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"mv /home/ice/.hermes/skills/.archive/github-issues /home/ice/.hermes/skills/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9438c938-a157-43c3-9756-f98fa9def8cd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:29.457155699+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\ncd /home/ice/.hermes/skills/github\nmkdir -p references templates scripts\n[...redacted 131 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f531f3c-9d63-4944-9d55-a6760a49344d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:34.640623176+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"set -e\ncd /home/ice/.hermes/skills/github\nmkdir -p references templates scripts\n[...redacted 1509 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c74eb5e4-dfd6-4bb7-a121-b5356667f064","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T23:45:50.483496293+00:00","session_id":"0416f669-27f2-4e23-b18e-1d997c4d0ea1","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/skills -maxdepth 3 -name SKILL.md -print | sed -n '1,20p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"591272b4-da78-4c45-a597-47ce462a11b3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:03.301611198+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -l /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7558c84-2867-4630-9686-8b841ea48281","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:13.916772867+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re, json\nfrom pathlib import Path\nhtml = Path('/tmp/gh_t[...redacted 305 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2a109b80-ee66-4958-bfeb-f6a150fa72c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:22.599057997+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re, json, html as h\nfrom pathlib import Path\ntext = Path[...redacted 1236 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bc8f92c9-4b68-4ee3-b91c-b82c42ebc10f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:28.700175016+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, json\nrepos = [\n'iptv-org/iptv',\n'addyosmani/ag[...redacted 741 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be10dea7-f81f-42d1-b121-d75e30acb8bc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:34.801494964+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, json, os\nfrom pathlib import Path\nrepos = [\n'i[...redacted 735 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dccf297a-6265-44e2-b672-87d28d0206ed","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:39.745595336+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, json, os\nfrom pathlib import Path\nheaders = {'[...redacted 670 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cacd4852-9b63-4875-a922-1c2fbd6c5426","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:45.734554339+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport requests, json, os\nfrom pathlib import Path\nrepos = [\n'f[...redacted 833 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d1289886-9199-4e56-a785-cc8fa1087df1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:31:54.069203417+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, os, requests\nfrom pathlib import Path\nitems = json[...redacted 1059 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a8d11f27-e569-4ac7-b17c-fd49d0b2d723","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:32:00.909491244+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\nitems = json.loads(Path('/[...redacted 317 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47b07d35-6d1d-4a14-aee8-1267922516a4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T06:32:15.696363757+00:00","session_id":"ba7e0deb-1717-4f33-b33d-7d058c38c0a4","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\nitems = json.loads(Path('/[...redacted 1994 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01ed5dbf-d9c4-47f6-aad8-9b6e08293b6b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:04.537611595+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d206201d-2fad-4567-af1a-464c8903ec40","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:14.205705608+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, re\n\nhtml_path = '/tmp/gh_trending.html'\nwith open[...redacted 324 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8e7cec2-b1a3-4697-8228-093173bc56f9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:19.713293563+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, re\nfrom html import unescape\n\npath = '/tmp/gh_tre[...redacted 428 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53e0555d-026e-4991-afd2-b1be8514b656","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:26.596095307+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, re, html as html_lib\n\npath = '/tmp/gh_trending.ht[...redacted 862 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81665b9f-9d04-4cb3-b97b-6719cd11df6b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:33.540356971+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re, json, html as html_lib\n\npath = '/tmp/gh_trending.ht[...redacted 1230 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8af92e56-91a7-435b-8b6e-4588bc990b65","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:38.670834396+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re\n\npath='/tmp/gh_trending.html'\nwith open(path,'r',enc[...redacted 299 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"87b3001c-ae9e-4291-a168-684193765747","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:46.695847719+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"curl -sLH 'Accept: application/vnd.github+json' 'https://api.github.com/search/r[...redacted 118 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d6b3dc44-f7e5-4476-aeef-0d431ffbadc9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:31:54.952922813+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Block","rule_ids":["schemeless_to_sink","schemeless_to_sink","schemeless_to_sink","curl_pipe_shell","curl_pipe_shell","curl_pipe_shell"],"command_redacted":"curl -sLH 'Accept: application/vnd.github+json' 'https://api.github.com/repos/fr[...redacted 359 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f27e6c8b-1c7c-4636-81c7-645e2f4eb435","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","schemeless_to_sink","schemeless_to_sink","curl_pipe_shell","curl_pipe_shell","curl_pipe_shell"]}
{"timestamp":"2026-06-15T06:32:03.020661338+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"curl -s 'https://api.github.com/repos/andrewyng/aisuite' > /tmp/api_aisuite.json[...redacted 1082 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbc421cb-9375-43fd-a712-d5c71d54145b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:32:12.981319495+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"curl -s 'https://api.github.com/repos/GorvGoyl/Clone-Wars' > /tmp/api_clonewars.[...redacted 408 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"141e871b-28ac-4ab1-a8cc-397cdd57b189","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:32:17.240907718+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"curl -s 'https://api.github.com/repos/GorvGoyl/Clone-Wars' > /tmp/api_clonewars.[...redacted 338 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f2f4878-7049-4aa0-8300-26c3c2ae1251","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:32:25.735793628+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, os, subprocess, re\n\nhtml='/tmp/gh_trending.html'\n[...redacted 1088 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"41c52f24-ca9c-4aca-97a6-eeb91610bdc7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:32:32.246136322+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json, os\nrepos=[]\nfor path in [\n'/tmp/api_iptv.json','/[...redacted 963 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4049a417-de0f-41da-8059-a36239c3b65c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:32:44.183778842+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport re\ntext=open('/tmp/gh_trending.html','r',encoding='utf-[...redacted 132 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc8509ad-595f-499c-aaab-4fe8a6bd0043","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:32:54.231766735+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"env | grep -E '^(TELEGRAM_BOT_TOKEN|TELEGRAM_CHAT_ID)=' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d910edf8-b39b-492b-9d9a-cae11fa92a78","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:32:59.560071388+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 3 -type f \\( -name '*.yaml' -o -name '*.yml' -o -name '[...redacted 124 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4d96d84-9f97-4697-bed2-3590792ac890","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:33:13.172415869+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"grep -E '^TELEGRAM_BOT_TOKEN=' /home/ice/.hermes/.env | head -n1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"717f08d9-e836-458c-b0db-1169a0da6e0e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:33:17.495890656+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"set +H && sed -n 's/^TELEGRAM_BOT_TOKEN=//p' /home/ice/.hermes/.env && printf '\n[...redacted 71 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa6857cd-9453-470b-86c2-3d067252bb17","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:33:31.055595124+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"source /home/ice/.hermes/.env >/dev/null 2>&1; echo \"TELEGRAM_BOT_TOKEN length=$[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad7a12df-80d1-445d-972e-fc6b66f50bd6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:33:35.302715330+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"source /home/ice/.hermes/.env >/dev/null 2>&1; printf 'token=%s\\n' \"$TELEGRAM_BO[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fcf0522-d1a9-4845-a276-31df7976aa6c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T06:33:41.108840946+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"set +H && source /home/ice/.hermes/.env && printf '%s\n' \"$TELEGRAM_BOT_TOKEN\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4595c30f-ffaf-48a8-917d-d2d37787179f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T09:52:00.619486373+00:00","session_id":"2176da7c-c5fe-49e7-9d03-f05639add810","action":"Allow","rule_ids":[],"command_redacted":"curl -sI -o /tmp/gh.head -w \"%{http_code} %{time_total}s\" https://github.com","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25780af7-3990-4f91-9572-93738bbfa06f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T10:38:53.587597064+00:00","session_id":"ae5dcc06-0a74-46e8-a5f9-330748d67c79","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -H 'Accept: text/html' -o /tmp/gh_trending.html 'https://github.com/tre[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"952672e3-43d7-4c9f-b1a6-97aad9541df4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T10:39:12.418474926+00:00","session_id":"ae5dcc06-0a74-46e8-a5f9-330748d67c79","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re, html, json\nfrom html.parser import HTMLParser\n\nclass[...redacted 1929 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc0faa6c-602f-4c3e-8342-c4d6e1a44828","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T10:39:22.924736389+00:00","session_id":"ae5dcc06-0a74-46e8-a5f9-330748d67c79","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re\nfrom html.parser import HTMLParser\n\nclass TrendingPar[...redacted 2121 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"890cded0-4dfb-462b-a005-85e2f90832ef","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T10:40:56.811462275+00:00","session_id":"ae5dcc06-0a74-46e8-a5f9-330748d67c79","action":"Allow","rule_ids":[],"command_redacted":"rg -n \"^## Media|^### |^\\| # |^Resultado final|^Geração automática\" /tmp/herm[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c386d6c4-622a-4706-8481-06099ea57090","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T10:41:02.286675474+00:00","session_id":"ae5dcc06-0a74-46e8-a5f9-330748d67c79","action":"Allow","rule_ids":[],"command_redacted":"grep -nE \"^(## Media|### |\\| # |Resultado final|Geração automática)\" /tmp/her[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c68154fb-da98-48f2-9938-b786fdd4147a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T10:41:12.486448660+00:00","session_id":"ae5dcc06-0a74-46e8-a5f9-330748d67c79","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\np = Path('/tmp/hermes-results/chatcmpl[...redacted 151 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2d0e3ef6-a51c-43d8-8620-38bcaf8c6b2c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:31:20.004055178+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b102022-c67a-495b-aac4-3ee25d6d2086","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:31:29.409838444+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, re\nfrom pathlib import Path\n\nhtml = Path('/tmp/gh_[...redacted 590 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16371f34-1bdf-455d-b919-8a80c8004aa4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:31:34.706659877+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"rg -n \"Box-row|article class|repo-row|js-repo-pjax-container|href=\\\"/[^\\\"]+/[^\\\"[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"700c2e2a-a977-4d15-bd40-43181ec5dff3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:31:38.623038144+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"grep -oE 'href=\"(/[A-Za-z0-9._-]+/[A-Za-z0-9._-]+)\"' /tmp/gh_trending.html | hea[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f008ac78-2257-4d46-810d-eb4a470d4d1c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:31:56.505634359+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, re\nfrom pathlib import Path\n\nhtml = Path('/tmp/gh_[...redacted 695 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec22ad06-b5f0-40bd-9166-b40515d1834d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:32:04.368149112+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\n\nrepos = [\n  {\"owner\":\"ipt[...redacted 947 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"15486d24-cb93-4395-aa40-315f9fb21d96","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:32:12.838321102+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, subprocess\nfrom pathlib import Path\n\nwith open('/t[...redacted 1442 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17951ef5-d809-42e3-9b98-9e66cfd111d4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:32:23.813317887+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, subprocess, re\nfrom pathlib import Path\n\nwith open[...redacted 821 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70747276-b36c-40f1-af69-594e93fff90b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:32:52.169411010+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, re\nfrom pathlib import Path\n\nwith open('/tmp/repor[...redacted 2800 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"217d2b5d-5796-4b90-a310-b060dc11f884","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:33:05.032886770+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\nfrom datetime import datet[...redacted 2371 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3aa96001-f96b-41ad-8387-4141232ccd90","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:33:11.138246389+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i -E 'telegram|tg|token|bot' | cut -d= -f1 | sort -u","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6dad4db2-b428-4c6b-b583-aba46ab71c9e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:33:25.508918046+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport os, json\nfor k in sorted(os.environ.keys()):\n    if 'TEL[...redacted 97 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b8b210f-96e9-43ad-806e-46ed52df234a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T06:33:36.721521788+00:00","session_id":"f4a87db0-f365-4821-a1c7-3c1dd8930d32","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport os, json\nfor k in sorted(os.environ.keys()):\n    if any([...redacted 170 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4d74b65-4627-4e3c-bde8-173081e6e87e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:31:00.033958320+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea863982-f6b5-4adf-b1a1-fd52f80b3488","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:31:55.154653740+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, re\n\nwith open('/tmp/gh_trending.html', 'r', encodi[...redacted 911 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8eb1fc6-ed70-4c87-b4ce-c994ac20cdca","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:32:21.699585707+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, urllib.request, time\n\nwith open('/tmp/trending_par[...redacted 1264 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7478bd0e-118b-4e60-b0f5-8b4abd15150a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:32:50.353700244+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /tmp/report && python3 - <<'PY'\nimport json, urllib.request, time\n\nwith[...redacted 1750 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36d05100-a6a6-4682-a801-328dd0c3d158","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:33:26.002526017+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, datetime, html\n\nwith open('/tmp/report_items.json'[...redacted 1076 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d3c15fb-edac-4907-9589-4dd039b154f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:34:09.211899409+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"sleep 1 && ls -l /tmp/report_items.json /tmp/gh_trending_report.md && test -f /t[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bbb9d8a8-560b-49ce-bab0-32760104adf4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:34:50.678894598+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport os\nfor k in ['TELEGRAM_TOKEN','TELEGRAM_CHAT_ID','GOOGLE[...redacted 143 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa88d206-d139-4b3e-897d-67f672b48172","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T06:35:20.774925073+00:00","session_id":"da46d012-1f80-4c05-bae3-ee38efffc94c","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, datetime, re\nwith open('/tmp/report_items.json') a[...redacted 1669 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9ada0028-ff03-41d3-a31c-600ca74d117e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T10:37:58.340008250+00:00","session_id":"7df35b1c-437b-4aec-a78f-d1c97da758dc","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes && hermes doctor","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7215d24e-f5d4-4049-8e2c-f04d25560c09","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T06:30:19.609142646+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"688788f3-76ea-4d81-b292-7289c17240a3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T06:30:26.041047079+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport re, json\nhtml = open('/tmp/gh_trending.html', 'r', encoding=[...redacted 751 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21889083-a061-4d58-8be1-bf3c7e102507","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T06:30:39.534226475+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py > /tmp/trending_parsed.json && wc -c /tmp/trendin[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"84948c97-5264-49dc-9511-33bf7fb23996","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:22:22.718518021+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b0798dd-5fe5-4917-a944-319f4eff17c8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:22:38.749825961+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport re, json\nhtml_path = '/tmp/gh_trending.html'\nwith open(h[...redacted 1057 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"68123e4f-02e9-41c3-803a-6249a0ee942f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:22:45.011450008+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, urllib.request, urllib.error, time, os\nfrom dateti[...redacted 648 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6dc831c8-e416-42c1-aab9-207b61ddd1e7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:23:02.754901473+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nitems = json.load(open('/tmp/trending_api.json'))\nf[...redacted 257 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d3e19dd0-0b5e-4bb6-b2dc-a181eb8b6c2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:23:10.309237105+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, urllib.request, base64, time\nitems = json.load(ope[...redacted 670 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e028a540-4aca-49e5-af01-d2cad9382b34","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:23:32.961278440+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, os, urllib.request, base64\nfrom datetime import da[...redacted 3273 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d783e10-2e72-49f4-9029-0b886b94d20b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:23:41.346330799+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i telegram || true; ls -la ~/.hermes 2>/dev/null | head -n 40 || tru[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"648bfdb8-3636-49e4-b9a0-a7f3ee441acd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:23:50.247139528+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"set -e; ls ~/.hermes/skills; cat ~/.hermes/skills/email/himalaya/SKILL.md 2>/dev[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bfec7c8-0cc7-485a-b7ad-5a74c6edec43","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:29:20.101957320+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"ls -lt ~/.hermes/cron/output 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d577d2a4-16a1-4695-9813-a92a91046347","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:29:28.216416917+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/cron/output/d626a1e54056 -type f -printf '%T@ %p\\n' 2>/dev/null |[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1dc1c88b-a608-4fa1-9c80-364f5bc70738","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:29:38.976530181+00:00","session_id":"66e19a4a-0f38-4b14-92b1-cf4f1052f740","action":"Allow","rule_ids":[],"command_redacted":"find /tmp -maxdepth 3 \\( -name 'report_items.json' -o -name 'trending_parsed.jso[...redacted 85 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be444d4c-398e-422a-9c75-ff361e875ef8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T06:30:23.102809997+00:00","session_id":"6bfce515-cf9a-4778-8f76-eae76dcbc687","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -l /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35518b55-3b8e-4d01-8390-f9af90f6d957","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T06:30:38.479877949+00:00","session_id":"6bfce515-cf9a-4778-8f76-eae76dcbc687","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom bs4 import BeautifulSoup\nimport json, re\nhtml_path = '/tmp[...redacted 1707 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1d59c69-9cb6-49fd-afb5-f22c5cc3733f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T06:30:51.534137086+00:00","session_id":"6bfce515-cf9a-4778-8f76-eae76dcbc687","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip list | grep -iE 'beautiful|lxml|html|requests' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b120b323-3bc1-4ea2-82d7-5887c0c4c0c6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T06:30:57.101955375+00:00","session_id":"6bfce515-cf9a-4778-8f76-eae76dcbc687","action":"Allow","rule_ids":[],"command_redacted":"uv tool install beautifulsoup4 lxml requests","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"af707e27-af42-4312-8896-6ee95dd9a260","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T06:31:05.069056255+00:00","session_id":"6bfce515-cf9a-4778-8f76-eae76dcbc687","action":"Allow","rule_ids":[],"command_redacted":"uv tool install beautifulsoup4 requests","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"451a3dd6-3611-46c6-a83c-33fc9b0ea8ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T06:31:09.540400435+00:00","session_id":"6bfce515-cf9a-4778-8f76-eae76dcbc687","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && uv venv .venv && /tmp/.venv/bin/pip install beautifulsoup4 requests &[...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"428a40a2-8484-4e04-9ef4-df2d5be469ed","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["threat_suspicious_package"]}
{"timestamp":"2026-06-20T11:07:33.317016167+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/cron/output/ && find ~/.hermes/cron/output/ -type f -name \"*.md[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bf2075e8-4a90-4ac9-abb0-2cde6587f05a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:07:42.353854849+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport pathlib\np = pathlib.Path('/home/ice/.hermes/cron/output/[...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"43a40532-8793-473b-b77c-c5c5a3724e85","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:07:55.180717678+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"set -e\ncurl -sL -A 'Mozilla/5.0' https://github.com/trending -o /tmp/gh_trending[...redacted 121 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9e147c6a-67c2-47a8-b624-66fa6bf92967","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:08:08.155047444+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/parse_trending_today.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"147b03d2-8638-4462-8fbd-9d0a0ce79cea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:08:19.934509602+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_metadata_today.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d096ccd0-1da3-42e8-b50a-4963f2802110","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:08:34.679429259+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/build_report_items_today.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e429728-7a74-4b67-87d2-4a97607425dc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:10:39.288016159+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"/usr/bin/python3 /tmp/fetch_readmes_today.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90a747eb-da16-43ac-a6f0-3bd05991712a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:10:49.677611746+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, re\nfrom pathlib import Path\n\nitems = json.loads(Pa[...redacted 259 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c71350a7-06f8-4cfa-bb59-15a80e59793d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:11:03.666342794+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\n\nitems = json.loads(Path('[...redacted 4682 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e093238-0df8-489a-9903-98fa0d1634c6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T11:11:11.426491646+00:00","session_id":"bf8bda86-029e-4671-85d7-6566540a4db3","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\n\n# Check actual repo names[...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a660909d-f345-45be-9856-1de09ed855ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T23:37:44.034605980+00:00","session_id":"2d4522b6-901b-4c07-97ec-775f9e1f0d50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/skills -type d -name \"github\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50eff06d-66c1-4229-9c5d-4f669d8f69a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T23:38:11.719548123+00:00","session_id":"2d4522b6-901b-4c07-97ec-775f9e1f0d50","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /home/ice/.hermes/skills/.archive &&\\\nfind /home/ice/.hermes/skills -ma[...redacted 614 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2a6a2ac3-2d9c-4f4c-8def-873e3d200799","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T23:38:22.196999341+00:00","session_id":"2d4522b6-901b-4c07-97ec-775f9e1f0d50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/skills -name \"Skill.md\" -o -name \"SKILL.md\" | grep -E \"(c[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa2c5804-0496-4b00-a59b-8acaff4dfe88","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T23:38:33.482664849+00:00","session_id":"2d4522b6-901b-4c07-97ec-775f9e1f0d50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/skills/software-development -name \"SKILL.md\" -exec echo {[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c786984c-e49f-448d-8aae-5358a039e78b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T23:38:42.575785137+00:00","session_id":"2d4522b6-901b-4c07-97ec-775f9e1f0d50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/skills -maxdepth 1 -name \"github-trending*\" -type d  2>/d[...redacted 102 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9dd9228e-bd9a-410c-846a-76d38035a0b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T23:38:50.489550813+00:00","session_id":"2d4522b6-901b-4c07-97ec-775f9e1f0d50","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ice/.hermes/skills/github-trending-research/ 2>/dev/null && cat /home/i[...redacted 101 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a4c1fdf-2604-4ede-911a-481a42f26b30","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:30:24.137721837+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b692003-169f-4884-8574-7445fb674ea8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:30:47.455708907+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"099335b8-08b9-45a8-a686-d9136f36e3f1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:30:52.822889795+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"uv pip install beautifulsoup4 --system","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e572c23-9eaf-487c-b529-e6ad6573a0db","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:30:57.590200938+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"python3 -m venv /tmp/parser_venv && /tmp/parser_venv/bin/pip install beautifulso[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50739573-45bc-475d-afdf-4eae6c275a86","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:31:04.893479267+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"pwd && ls -la /tmp/ && python3 --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a29843a3-b5f8-497c-b69d-694889d69c33","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:31:08.297331965+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"apt-get update -qq && apt-get install -y -qq python3.13-venv","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c975195-62d5-452c-afe5-96129421f57b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:31:27.042056360+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending_stdlib.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0fd1788-4d5c-405a-8308-fbd45c8ed2f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:31:51.265522651+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"bash /tmp/fetch_meta_batch.sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cd060d2e-4b84-4137-bc2e-347305fd0336","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:32:09.635088353+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/build_report_items_today.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06feff4d-9fa2-4844-af41-c7aeaf3b3deb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:32:26.943039401+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/generate_reports_today.py && wc -c /tmp/report.md /tmp/report_email[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c64e6e1-e413-4246-9830-3141bfebd78b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:32:46.014772637+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"grep -ri googlesuper /tmp/*.py /tmp/*.sh /tmp/*.json 2>/dev/null | head -n 20; e[...redacted 97 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69cab59f-5ea8-4b79-88ac-bce2f9645ffe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:32:52.471065952+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"which sendmail 2>/dev/null; which msmtp 2>/dev/null; which python3 2>/dev/null; [...redacted 138 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b348e6fc-4076-49f5-babb-2edf38e7a7e4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:33:04.666750323+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i -E 'TELEGRAM|BOT|TOKEN|CHAT|TG' | sed 's/=.*/=***/'; echo \"---\"; l[...redacted 128 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fb0708f-048b-4d82-b660-c8f85a9ad139","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:33:13.472280482+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/.hermes/.env | grep -i -E 'TELEGRAM|BOT|EMAIL|SMTP|SEND|GOOGLE' | [...redacted 141 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"82c81c3c-abf0-4bbf-b0d7-f55b1ed3c4d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:33:21.571113123+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"grep -r '[REDACTED:Email Address]' /tmp/*.py /tmp/*.sh /tmp/*.json 2>/dev/null |[...redacted 235 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"541dcfaa-eda1-449d-8bc3-d059f5293c1e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:33:46.322333584+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"grep -v '^#' /home/ice/.hermes/.env | grep -i -E 'EMAIL|SMTP|SEND|GOOGLE' | sed [...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"20f64489-8890-4303-8442-8a13b48009fa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:33:50.598115013+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"cat /etc/postfix/main.cf 2>/dev/null | grep -E 'relayhost|smtp_sasl|smtp_use_tls[...redacted 122 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8dfdb5ef-f96e-40e2-8c9c-816508bed6b3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:34:02.605633386+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp 2>/dev/null | grep -E 'LISTEN' | head -n 20; echo \"---\"; ps aux | grep [...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0f17950-8df5-4344-88e9-97405492e985","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:34:08.759436304+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:8642/api/ 2>/dev/null | head -n 50; echo \"---\"; curl -s[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d4b6536-5d2a-4d4e-bbf8-1e179a628ea0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:34:17.521164080+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:8642/docs 2>/dev/null | head -n 50; echo \"---\"; curl -s[...redacted 135 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"989250e8-b4be-4ad2-9dc7-abf869b533de","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:34:26.793192553+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 4 -type f \\( -name '*.py' -o -name '*.js' -o -name '*.e[...redacted 125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab53ffbf-2af7-4165-bfdd-9b13bc5c6760","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:34:42.981973583+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"grep -E 'EMAIL|SMTP|GOOGLE|SEND' /home/ice/.hermes/.env","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a81dcd5-6ce0-4903-bc5e-afa2b174eecf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:34:52.904148962+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/hermes-workspace/.env | grep -i -E 'EMAIL|SMTP|GOOGLE|SEND|WONEY' [...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64a3a4fc-7551-4094-b0a6-cae3061c3209","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:35:06.878249623+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i -E 'SMTP|MAIL|SEND|POSTFIX|RELAY|API_KEY|SECRET|TOKEN' | sed 's/=.[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"82ad2eb7-95e8-4234-a6c2-3f6828ee6e0f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:35:12.129418042+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"grep -r 'gmail_send\\|send_email\\|SMTP\\|smtplib' /home/ice/.hermes/hermes-agent/ [...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17f7a211-f11e-4b5c-8948-92c8cc59ecfb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:35:21.533126164+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"grep -E 'EMAIL|SMTP' /home/ice/.hermes/state-snapshots/20260613-133419-pre-updat[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe887953-56e1-4ea8-b716-e9be957922da","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:35:29.200966851+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes -maxdepth 3 -type f | xargs grep -l 'GOOGLE\\|GMAIL' 2>/de[...redacted 103 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d13e6d04-5735-448f-8bb9-087009849d66","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:35:36.409458794+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import json; d=json.load(open('/home/ice/.hermes/auth.json')); print[...redacted 85 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0d71a93-f136-4b15-813a-552e09f64fdd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:35:48.619102266+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"wc -c /tmp/report_items.json /tmp/report.md /tmp/report_email.html && tail -n 30[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4e24ea83-7e46-4454-a27a-6d5c2c9a3732","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:35:54.533144909+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"nc -z localhost 8081 2>/dev/null && curl -s http://localhost:8081/ 2>/dev/null |[...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"975e9af2-98e4-4efb-aa49-49b7db4d8157","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T06:36:03.937561195+00:00","session_id":"143c5da8-262a-4a8d-9f1b-dd2c44fafc95","action":"Allow","rule_ids":[],"command_redacted":"which sendmail; ls -la /usr/sbin/sendmail 2>/dev/null; echo \"---\"; cat /etc/alia[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc3c03b4-4f75-4254-b81c-2c3fffb9c5d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:30:35.718319625+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -l /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eefd8e0e-2793-482b-9887-86af3d8c6dd1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:30:57.068855261+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/parse_trending.py\nimport re, json\nfrom pathlib import Path[...redacted 1460 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3d49a77d-4f7a-4265-a33c-23863bd7ddbf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:31:08.636019336+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import datetime; print((datetime.date.today()-datetime.timedelta(1))[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"51349ce8-5f7d-48ce-8331-4a2a6e333229","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:31:18.930820908+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"YEST=$(date -d \"yesterday\" +%F)\necho \"$YEST\"\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb17c76f-bc1d-46ad-a555-31d2ddece760","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:31:42.916398835+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'EOF' > /tmp/enrich_repos.sh\n#!/bin/bash\nset -e\nTODAY=$(date +%F)\nYEST=$([...redacted 2895 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"20272d12-273f-4d88-bfc1-ab15e0f6577f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:31:57.730442439+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/build_report_items.py\nimport json, os, urllib.request\nfrom[...redacted 2447 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5052687-0bfd-435e-bad9-61e1dcd1825c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:32:17.348444810+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"apt-get update -qq && apt-get install -y -qq jq\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7467d83b-b4fe-449b-8445-09bda5253b28","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:32:23.022342224+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"grep -n \"palmier\" /tmp/gh_trending.html | head -n 10\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b86dd98-3e3f-4e5c-8142-a954a35040f4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:32:37.594326900+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -D - https://api.github.com/repos/torvalds/linux -o /tmp/linux.json && [...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d3ff98af-453b-4bb3-8ff7-5c6dbc39878c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:32:45.496794510+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -D - \"https://api.github.com/repos/palmier-io/palmier-pro\" -o /tmp/palm[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d2dcda2-05bd-4af1-a40c-602f5adb9390","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:32:59.057906225+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/build_report_items.py\nimport json, urllib.request, urllib.[...redacted 2481 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"de419052-fd45-493b-a70b-69427d8d7b79","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:33:32.262388298+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -o /tmp/palmier2.json -w \"%{http_code} %{ipv6}\" \"https://api.github.com[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a7167c7-6c87-4906-a378-7cafc12c8546","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:33:38.713038167+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"curl -sI https://api.github.com/repos/torvalds/linux | grep -i ratelimit\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"243213a5-adf0-4018-969b-371b67ea18bb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:34:04.491273224+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/torvalds/linux | grep -o 'userInteractionCount[^<]*'[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1cfb5af7-277b-40e9-aaf0-ac222099ad37","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:34:18.249301497+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"curl -sI \"https://api.github.com/search/repositories?q=tors+pushed:2026-06-21&so[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88ae9faf-c68e-4ae9-9aae-6d79149d1be1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:34:36.863969636+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/search_enrich.py\nimport json, urllib.request, urllib.parse[...redacted 2783 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72e10ed7-e226-4466-9496-63a1d5115170","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:34:58.568532303+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"ls -la /usr/local/bin/ 2>/dev/null; which sendmail 2>/dev/null; ls -la ~/.config[...redacted 85 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"559a424d-745a-428c-a2b7-82f4da13bf4a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:35:06.045296326+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"which googlesuper_send_email 2>/dev/null; which gmail 2>/dev/null; find /usr -na[...redacted 135 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62a24964-81f6-440e-bd2b-4c3ad59663ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:35:14.947412291+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep -E '3000|8080|9000|5000'; ps aux | grep -i composio | head -n 10[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f3a44169-2900-4eea-9509-ee1d6940426b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:35:27.700416393+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"env | grep -iE 'smtp|gmail|google|mail|password|pass|token' | head -n 40\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b48f59e5-1ac6-4225-8f37-bea7fa209197","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:35:32.853418614+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.muttrc 2>/dev/null; ls -la ~/.msmtprc 2>/dev/null; ls -la ~/.netrc 2>/[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4177dcb8-5780-421e-abbe-cfbbfcb78180","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:35:44.349882028+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"sendmail -V 2>/dev/null; postfix status 2>/dev/null; ss -tlnp | grep ':25'\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7201748b-8de8-4187-984d-df2584496fbc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:36:09.829200484+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"echo -e \"Subject: Test\\nTo: [REDACTED:Email Address]\\nContent-Type: text/html\\n\\[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a202ebad-79da-4563-93e2-1cb28dfd9018","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:36:18.004826664+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"which mail mailx mutt msmtp sendmail postdrop 2>/dev/null; dpkg -l | grep -E 'ma[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"78586194-5e8f-48a7-a36f-d4c7cf6fb435","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:36:26.681866692+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport smtplib\nfrom email.mime.text import MIMEText\nfrom email[...redacted 462 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44563bd2-19be-464d-83ff-2d6677f7d884","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:36:36.855561034+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/fetch_readmes.py\nimport json, urllib.request, time, os\nfro[...redacted 1046 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"abfa1067-ed2b-4f7e-825a-830294d89915","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:37:51.895769761+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PYEOF'\nfrom pathlib import Path\nimport re\nfiles = sorted(Path('/tm[...redacted 331 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"236d5ebd-f70b-4609-a8ae-55b2ed08ae40","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:39:05.688086826+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'EOF' > /tmp/report_md.md\n# Relatório GitHub Trending — 21 de junho de[...redacted 6463 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d7355bc2-b7da-4353-95a6-69beb0c6298f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:39:43.191623758+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'EOF' > /tmp/report_email.html\n<!DOCTYPE html>\n<html lang=\"pt-BR\">\n<head>[...redacted 5611 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49c4e3a0-800f-4c76-9b52-b43128c1dc6a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:40:09.977889143+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"postconf myhostname 2>/dev/null; postconf myorigin 2>/dev/null; postconf mydomai[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63044b6f-bba2-4cf6-adba-3ca7cf00ab07","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:40:30.815335530+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"ls /etc/postfix/ 2>/dev/null; cat /etc/postfix/main.cf 2>/dev/null | head -n 40\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e94150eb-f530-45e9-95d8-7a9fb1b40ca0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:42:20.819539726+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"which himalaya && himalaya --version\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b960a77-d000-418f-924d-abdd3291586b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:42:39.204337528+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -sSL https://raw.githubusercontent.com/pimalaya/himalaya/master/install.sh [...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aee0bc2c-780f-4fe3-b8b5-e577f9d6df22","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-22T06:43:10.632184904+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"which cargo; rustc --version 2>/dev/null; curl -sL https://api.github.com/repos/[...redacted 74 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f5b74510-5d68-4e00-8afb-c048640caeac","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:43:28.617487156+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.password-store 2>/dev/null; pass list 2>/dev/null | head -n 20; ls -la[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9263cf1e-fd4d-4012-a89f-5c44381b55b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:44:02.485952213+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp; env | grep -iE 'SMTP|SMTP|token|api|key|secret|mail|email' | head -n 5[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3f1d3a5-1a27-4d6a-922a-c24184d9a18e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:44:20.658598835+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PY' > /tmp/test_email.py\nimport smtplib\nfrom email.mime.text import MIME[...redacted 541 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b455cb0d-713f-41b0-a7aa-6cabc5ddc638","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:44:35.604527764+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"sleep 5; postqueue -p 2>/dev/null || mailq 2>/dev/null || true\n","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e50f7de1-b0fa-4fb0-bd4c-8b5431576ac3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:45:14.514601029+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/send_report_email.py\nimport smtplib\nfrom email.mime.multip[...redacted 606 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dafbc214-9e3f-46ea-af2b-70f97e91480d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T06:45:53.658085047+00:00","session_id":"d0d13e8b-e9cc-496d-9062-6eb0d8242cf2","action":"Allow","rule_ids":[],"command_redacted":"python3 - << 'PY'\nimport json\nitems = json.load(open('/tmp/report_items.json', e[...redacted 142 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be7956ed-ba43-4d85-8130-84bde8771a32","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:30:47.439220721+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -l /tmp/gh_tr[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"60ddba51-b51c-4c05-98a1-53132d683a99","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:01.788868849+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, re, html as html_lib\nfrom pathlib import Path\nhtml[...redacted 666 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba5b72b1-4122-4626-ab08-c43d2cf99860","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:06.656402919+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"grep -oP 'href=\"/[^/\\s]+/[^/\\s\"]+\"' /tmp/gh_trending.html | head -n 30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0cfd82b4-6cde-449b-9d24-3040ba35b5bd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:16.406804390+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"grep -n \"repository\" /tmp/gh_trending.html | head -n 20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fdedc538-705f-4b78-ba19-838ec4e6c09b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:22.334826478+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, re\nfrom urllib.parse import unquote\nfrom pathlib i[...redacted 671 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5d043c9-f230-44b3-8539-695714d9506d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:28.766583018+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\nrepos = json.loads(Path(\"/[...redacted 188 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f4a8d042-a588-4c13-be87-063094ffd5fc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:33.071306713+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, urllib.request\nfrom pathlib import Path\nrepos = js[...redacted 991 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"34aa91f6-8be1-498a-9762-33c010da35f5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:39.946640231+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\ndata = json.loads(Path(\"/t[...redacted 265 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e774616-c87b-4647-a19a-a37d0f1d0d24","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:45.720450288+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json, urllib.request, base64\nfrom pathlib import Path\nit[...redacted 750 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"87863df4-a99c-48b7-961b-51e5c59896a1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:31:57.537745355+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24dcb231-5994-47bd-bdee-17bbb7b320ad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:32:08.757663193+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\nitems = json.loads(Path(\"/[...redacted 233 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49e4b0db-8896-471a-9d8d-69cce77f395f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:32:44.428456168+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"env | grep -iE 'telegram|bot_token|tg_|gmail|mail|smtp|google' | head -n 40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee804a0a-fa16-43bc-9840-e1ec05936076","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:32:51.684583399+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"which sendmail mailx msmtp himalaya 2>/dev/null; ls ~/.config/himalaya 2>/dev/nu[...redacted 74 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30c232e5-0775-4c35-80c2-41bc96397a27","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:07.124916040+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"which sendmail postfix msmtp ssmtp 2>/dev/null; ls /tmp/report_items.json 2>/dev[...redacted 117 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"383a0fd3-f12e-485e-a0de-5a5f7038d429","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:15.922113451+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"which gws python3 2>/dev/null; ls ~/.hermes/google_token.json 2>/dev/null || tru[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"05e72e12-d4b5-40c7-87ee-e9f199f7a241","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:22.787925823+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"find /usr -name \"sendmail\" -o -name \"postdrop\" 2>/dev/null | head -n 5; ls /usr/[...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26a1cb49-e6a7-4ba2-900e-4ca7a6f4df02","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:29.339428630+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"ls -l /usr/sbin/sendmail; file /usr/sbin/sendmail; postfix status 2>/dev/null ||[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f665c85-d81e-488b-b0cd-bf9be84b72d9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:38.289232123+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"postconf myhostname mydomain myorigin relayhost inet_interfaces inet_protocols 2[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90fcba6c-883a-439d-b125-503bc3deffd0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:42.371020614+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"postconf myhostname mydomain myorigin relayhost inet_interfaces inet_protocols 2[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c408afc-4ced-4296-8726-56c97a715d04","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:48.534416697+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"which postconf; postconf -d myhostname 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50b7cbe5-7147-4f47-9179-af03fb9e6d07","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:34:56.771855760+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport smtplib, email.message\nmsg = email.message.EmailMessage([...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3d7a6c7d-02ab-408c-9f05-4e0f6ff3c4fc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:35:06.868179862+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"sleep 25; mailq 2>/dev/null || postqueue -p 2>/dev/null || echo \"no queue comman[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df5335ea-6897-41c8-b46b-427ae15c9399","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:35:39.911524279+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"hostname -f 2>/dev/null || hostname; cat /etc/mailname 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"12c97fd3-e471-4fbb-82b7-94ea99ebbcba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:35:48.495514568+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\n\nitems = json.loads(Path(\"[...redacted 1645 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3e257d0-f7ad-4386-84b7-43c0958685c3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:35:54.200407403+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 4 -name \"*googlesuper*\" -o -name \"*google_super*\" 2>/de[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"349700d6-d175-4dc3-851b-3b45b9aaf7d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:36:05.000564677+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\nimport smtplib, email.mess[...redacted 2440 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"102a8ed1-8fb2-435c-a1fc-6e2f886e1344","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:36:12.846254480+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"sleep 20; mailq 2>/dev/null || postqueue -p 2>/dev/null || echo \"no queue\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b6b8b8a-adc0-409b-b4bd-8ac85c90a105","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:36:40.050143373+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /tmp/report_items.json | python3 -c \"import sys, json; d=json.load(sys.stdin[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dda7af36-47f7-468c-a22a-2e1b4f5dff52","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-23T06:36:59.092327833+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"tail -n 40 /var/log/mail.log 2>/dev/null || tail -n 40 /var/log/maillog 2>/dev/n[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9c7dfa6b-2262-4dfa-a230-3010a62797ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:37:13.347016565+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Warn","rule_ids":["variation_selector"],"command_redacted":"python3 - <<'PY'\nimport json, re\nfrom pathlib import Path\nfrom datetime import d[...redacted 1696 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"329541ba-ccea-4501-a46b-d81a464c4fdd","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["variation_selector"]}
{"timestamp":"2026-06-23T06:37:25.555129713+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/generate_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c0d82a1-a6e6-427f-9b81-052aaa92d447","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T06:37:41.744911589+00:00","session_id":"ee577167-5826-4529-88ea-90a3ef56b240","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport json\nfrom pathlib import Path\nitems = json.loads(Path(\"/[...redacted 161 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0f7289b3-a3cf-4d18-b770-88ec295ab9eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:30:36.691724849+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d14fcf47-30ca-4e9a-ab0d-b57c3d78af92","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:31:04.806538899+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/parse_trending.py << 'PYEOF'\nimport re\nimport json\nfrom html import u[...redacted 2322 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98a7a45b-28b6-4c43-87dc-38388e38aa31","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:31:09.875059546+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"grep -oE '<article[^>]+class=\"[^\"]*Box-row[^\"]*\"[^>]*>' /tmp/gh_trending.html | [...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52eae12a-9a07-47ea-8161-d41d43c42f5e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:31:18.099510770+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport re\nwith open('/tmp/gh_trending.html', 'r', encoding='utf-8',[...redacted 137 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"abf81a84-0f87-4c64-8c9f-8fdae1d7472e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:31:26.657287880+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"grep -n '<article' /tmp/gh_trending.html | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53a00498-026b-45dc-99b4-2e95dd87746e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:31:38.830427551+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import bs4; print('ok')\" 2>&1 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b8b0560a-4381-48c5-8df3-a709668410a4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:31:55.182203195+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/check_bs4.py << 'PYEOF'\ntry:\n    from bs4 import BeautifulSoup\n    pr[...redacted 122 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"efa00ecd-4add-430c-98bb-bf321fde3ea7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:32:17.553396818+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74ddd818-3406-4338-a782-46ac58e7d72e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:32:46.810769205+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa03e8e8-f1ec-4dc3-aace-4c5db251f63f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:33:15.761836876+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"904d3796-cbe9-4c19-a8ed-0815df818c25","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:33:30.855909321+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/fetch_metadata.py << 'PYEOF'\nimport json\nimport urllib.request\nimport[...redacted 1947 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"818c47f0-60f4-4bd1-9747-237f36141998","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:34:01.805323331+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/generate_report.py << 'PYEOF'\nimport json\nfrom datetime import dateti[...redacted 1435 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d55e0a43-dd78-4b85-83de-cc43d96e7397","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:34:26.045103881+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"which googlesuper || which hermes || ls /usr/local/bin | grep -i google || ls /h[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7d715a0-6d83-4ea2-a65a-a0fb118d8cd7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:34:30.619750089+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"which sendmail || which msmtp || which mail || which mutt || which python3 && py[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f3f57621-e3a1-493c-b3dc-209c1a814e02","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:34:41.605446015+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/check_mail.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d344b2a3-7939-4ba9-8463-7fc35ab2428f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:35:13.598497586+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i telegram || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ddf13a91-0faf-4552-9658-f4da3b98776f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:35:24.573992623+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"/home/ice/.local/bin/hermes --help 2>&1 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64a72584-d317-4dc1-b278-50f639b1d492","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:35:32.309109232+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"/home/ice/.local/bin/hermes send --help 2>&1 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0295fd70-3671-4533-8716-cc02abd4baec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:35:39.023811818+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"/home/ice/.local/bin/hermes send --list telegram 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01a5f614-fc8a-4aad-82e5-fdfd84480dbd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:35:47.952238082+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"/home/ice/.local/bin/hermes send --to telegram:Ney --subject \"Relatório GitHub [...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3269e94-5a5a-4b28-bcd4-55e0f957ef42","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:35:55.764320019+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"/home/ice/.local/bin/hermes send --list 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"316d6670-1841-4346-9c14-06748a8e29b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:36:08.730662505+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/generate_full_report.py << 'PYEOF'\nimport json\nfrom datetime import d[...redacted 1533 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a8bd4562-ef11-44f6-9894-90fc59672d7c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:36:19.030618800+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"/home/ice/.local/bin/hermes send --list 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d461c6f-5a74-49b0-b998-31d9bff6371d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:36:26.398411953+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/finalize_report.py << 'PYEOF'\nimport json\nfrom datetime import dateti[...redacted 355 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b232599f-152c-4bd4-9e4f-3a891958945c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:36:45.965343059+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"cat > /tmp/generate_email.py << 'PYEOF'\nimport json\nfrom datetime import datetim[...redacted 1876 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4290d7ed-e28e-4b24-a478-b175c3597dbe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-24T06:36:57.667458741+00:00","session_id":"f98b481c-86d1-4881-be0a-257bbef19003","action":"Allow","rule_ids":[],"command_redacted":"which gws || which googlesuper || which send_email || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3ded30eb-6d92-46a2-99e1-d9c7a9a2a1ea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:30:42.938191644+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && echo \"Downloaded[...redacted 72 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a35e6997-a230-4797-b55f-92bbf972266e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:31:06.967792869+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/parse_trending.py\nimport json, re\n\nhtml_path = '/tmp/gh_tr[...redacted 1638 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bdbb9613-680b-4054-a87d-69ebe24aad14","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:31:29.637925257+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/trending_parsed.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"346635bf-659c-4cee-a521-6cb0ec1e1852","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:31:45.264973980+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/fetch_metadata.py\nimport json, subprocess, time, sys\n\nwith[...redacted 2069 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"40947454-ab05-4a5d-8c4a-ded348a03096","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:31:58.753322680+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/prepare_report.py\nimport json\n\nwith open('/tmp/report_item[...redacted 943 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d941b9c8-aa99-4a11-b945-98d97b5a84f7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:32:05.135761625+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/report_items.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba0ebced-05b4-48db-8b16-71cfcfaee510","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:32:23.742039292+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/generate_report.py\nimport json\nfrom datetime import dateti[...redacted 6217 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d43575b3-5b44-4b93-a772-b8b3d7953f3d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:32:36.530630185+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/generate_report.py\nimport json\nfrom datetime import dateti[...redacted 6037 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"442be968-4c04-45d3-85eb-d7a27cc0827e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:32:40.606828704+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/report.txt","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4a121731-1008-4d17-b0c0-97718f3fccb1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:32:51.829611848+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 3 -type f \\( -name '*telegram*' -o -name '*tele*' \\) 2>[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"883c1065-64a6-44fb-96ee-7319fc47abb9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:32:57.418611295+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i telegram || true\ncat /home/ice/.hermes/config.yaml 2>/dev/null | g[...redacted 81 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e68c3b6-350f-4832-b588-2bb75dfae228","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:33:09.380829343+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/skills/productivity/google-workspace -type f -name '*.py'[...redacted 82 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f7986f6e-c531-453d-af26-388f5a79d236","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:33:16.423369215+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"which gws || which google-workspace || true\npython3 /home/ice/.hermes/skills/pro[...redacted 167 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e9d42ee-2fa3-4b3e-be08-24f3495e0443","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:33:22.195236992+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"which gws || true\npython3 /home/ice/.hermes/skills/productivity/google-workspace[...redacted 213 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba6dcb20-64d3-4e7b-8414-20640d6e9047","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:33:27.449811027+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"which sendmail mutt msmtp mail 2>/dev/null || true\ncat /etc/mail/sendmail.cf 2>/[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6405363e-3bb8-496e-8c12-11590bdafc60","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:33:35.090961117+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"env | grep -iE 'smtp|mail|email|auth|pass|token|api.key|gmail' | sed 's/=.*/=***[...redacted 208 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"266b00b3-2fe9-4dc5-893e-965861bde686","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:33:43.918797164+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/GuJumpgate/freemail-utils.js 2>/dev/null | head -40 || true\ncat /h[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8fd06814-34f4-41fb-a4d1-5b905d34d6a9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:33:55.667824806+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat /etc/postfix/main.cf | grep -E 'relayhost|myorigin|mydestination|inet_interf[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"20ab1cc1-80ec-4512-a90d-af1b214a6fc5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:00.368300868+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.netrc 2>/dev/null | grep -iE 'mail|smtp' || true\ncat ~/.mailrc 2>/dev/nul[...redacted 141 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2ee8e381-522b-407f-aa5b-c4291aac2773","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:06.733584031+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"grep -iE 'smtp|mail|email|telegram|telegram_token' /home/ice/.hermes/.env 2>/dev[...redacted 132 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aaa49756-41ee-4ad3-8a21-7f745c6b509b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:16.865574097+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/.hermes/.env | grep -v '^#' | grep -v '^$' | sed 's/=.*/=***/'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d48a8845-a51b-43cc-847e-b7543d786bc8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:24.076915457+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/.hermes/.env | grep -E '^TELEGRAM_BOT_TOKEN|^TELEGRAM_ALLOWED_USER[...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"db233b79-ed3e-41cb-8cc4-f67271dbc4cd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:34.068628447+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 4 -type f \\( -name '*sendmail*' -o -name '*smtp*' -o -n[...redacted 199 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f7985c6-f1bb-4361-99b9-ecbe56f0d0a3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:44.936926316+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 4 -type f \\( -name '*sendmail*' -o -name '*smtp*' \\) 2>[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62960863-a34c-4c21-9942-78bbc384ab90","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:49.790562826+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"which sendmail sendmail.postfix 2>/dev/null || true\nsendmail -V 2>/dev/null || t[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe1913e8-76cf-4642-ace7-15852db725b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:34:56.513557739+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"/home/ice/.hermes/skills/productivity/google-workspace/scripts/gws_bridge.py gws[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f5632e74-1c59-4a1c-bd4e-b2acce4d1e63","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:35:06.544776242+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"grep -rE 'EMAIL_ADDRESS|EMAIL_PASSWORD|SMTP|MAIL_ADDRESS|APP_PASSWORD' /home/ice[...redacted 134 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f3427d92-f0ed-4ed2-b28a-0e3fd5531df4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:35:21.483213970+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"set +H\nTOKEN=$(grep '^TELEGRAM_BOT_TOKEN=' /home/ice/.hermes/.env | cut -d= -f2)[...redacted 729 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3bd5a28d-9a52-4322-abaf-706e1c650621","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:35:32.427456867+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/send_telegram.py\nimport urllib.request, urllib.parse, json[...redacted 919 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3abdfb6a-daa4-41a9-a0e7-6d62c1f95e4f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:35:45.199216676+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/send_telegram.py\nimport urllib.request, urllib.parse, json[...redacted 1121 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9ed7d98d-0695-4c01-ae4b-42070ce553a8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:35:57.985665976+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"cat << 'PYEOF' > /tmp/send_telegram.py\nimport urllib.request, urllib.parse, json[...redacted 1403 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4e9f7eb-3d12-4b3f-bd54-92d15e83e248","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:36:39.397031253+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/send_telegram.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b3beb3c-167c-41a9-885c-0e1193460d13","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:36:49.092504924+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 3 -type f -name '*.env' -exec grep -l 'EMAIL' {} \\; 2>/[...redacted 71 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0cd9459-2e41-4f57-a8d7-f1486dfdd0f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-25T06:36:53.242362174+00:00","session_id":"4ee39659-12fe-47ea-8e44-bac8a732fbd7","action":"Allow","rule_ids":[],"command_redacted":"grep -nE 'EMAIL|SMTP' /home/ice/.hermes/.env || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fda47e0-19a5-49c1-ba2a-1e8a8b5db004","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:30:38.819318957+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3241b0c8-8cc1-4416-9082-6a778f6681c6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:30:59.323221391+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json, re\nfrom bs4 import BeautifulSoup\n\nwith open('/tmp/gh_t[...redacted 2543 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"95e67d2a-5350-4608-ac98-343053d5c67e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:31:24.398954212+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03a13219-ca1a-4de3-aee9-62ee16b44965","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:31:30.647570158+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"uv pip install beautifulsoup4 lxml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a0035c6-4d04-40bf-b9ef-eb5fb713aac6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:31:37.656324989+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f909b73e-70dc-4987-9381-a53669993bc5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:31:43.862099770+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"which python3 && .hermes/hermes-agent/venv/bin/python -c \"import bs4; print('ok'[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dbeef710-1c20-4323-800d-a713b0672188","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:31:53.043755789+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/test_bs4.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"843d994a-5cbd-4178-b6f7-8e40465d2253","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:31:59.173334003+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/parse_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63f3f01e-92fd-466b-a9f0-0d3fa28fff52","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:32:18.155440987+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/inspect_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"183a91a5-9fb5-4efa-8331-d321dbff60e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:32:29.801130631+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/parse_trending2.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"577f1b7c-d560-4af3-bc3e-33110c2e53fd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:32:50.214298479+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/skills/github/github-trending-reporting/references/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0df58b3-3313-4d9f-823b-d28886807e3f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:33:03.061225072+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/skills/github/github-trending-reporting/references/par[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5a95974-b36b-46df-8ca6-368245bcfa64","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:33:07.821857915+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/trending_parsed.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6e0a770-a4f4-498a-a0e1-cb82d7235560","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:33:23.477771187+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/enrich_repos.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"db452b48-6710-4341-88b0-528571730314","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:33:37.517034097+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/report_items.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b6b5ef0-642f-4ec6-bde0-adf666488d6d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:33:49.249220254+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"hermes send --list 2>/dev/null || echo 'no send list'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f986c22-5f22-4131-843f-e5fda35fb062","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:33:54.710128467+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"hermes tools 2>/dev/null | grep -i email || echo 'no email tools'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bd22744b-66ab-4128-922f-074f88787dbd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:34:05.661657295+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/.hermes/config.yaml 2>/dev/null | grep -i email || echo 'no email [...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dbb48cb1-9ae1-42af-ad94-3b4bc2946d6c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:34:09.468685704+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"which sendmail mail postfix 2>/dev/null; echo '---'; postqueue -p 2>/dev/null | [...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26974b6e-b722-43b6-8030-d2eb662fdd21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:34:26.771060328+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/generate_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"146c7446-e2ce-4fb0-ba6e-eb25f64a7e39","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:34:37.600332697+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/gh_trending_report.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab22ec46-973a-447c-b88c-b2dc5b84e865","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:34:49.462001235+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/md_to_html.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90c5ae22-d998-4a90-a0a5-7197766e54b0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:34:56.895959536+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"wc -c /tmp/gh_trending_report.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f4525361-b1c8-4873-bf67-4e781f6bb485","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:35:03.070512231+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"telegram\" /home/ice/.hermes/config.yaml /home/ice/.hermes/credentials* [...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"60be1ea2-84cd-4d8d-82bd-be84af985753","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:35:08.184076211+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"grep -A 10 -B 2 \"telegram:\" /home/ice/.hermes/config.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36e6839f-549a-4b65-adce-fb5d989e5d65","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:35:20.838741060+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/send_telegram.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3e9bd3f-6db9-42f4-be0f-b39ed6b5f683","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:35:28.753825613+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"hermes send --help","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0fc07ab3-48c8-4b21-8727-ed55a473c233","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:35:42.432627443+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":".hermes/hermes-agent/venv/bin/python /tmp/send_telegram.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50096e0f-c017-4ea2-b41f-291266f9b786","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:35:52.580242581+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"which sendmail 2>/dev/null; dpkg -l | grep -i postfix 2>/dev/null | head -3 || e[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b5347d5-632f-40c3-9f9d-0d4391f6ff08","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:35:59.805502842+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"cat /etc/postfix/main.cf 2>/dev/null | grep -E 'relayhost|smtp_sasl|smtp_tls' ||[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df31165f-67aa-4afa-b819-2de0222e3d8c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:36:04.648709396+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"which mail 2>/dev/null || echo 'no mail'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7a84fe6-8eae-429d-b2ca-ef1fd62ba58c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:36:17.733196767+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"hermes cron list 2>/dev/null | grep -A 3 -B 3 \"github\" | head -20 || echo 'no cr[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cd97b5f2-8682-46e1-9b4f-0f2e5755184f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:36:25.797297758+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import json; d=json.load(open('/tmp/report_items.json')); print(len([...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fe47974-91cc-44a3-be2a-c86e61908ae2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:36:33.633631261+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /tmp/report_items.json | python3 /tmp/test_bs4.py 2>/dev/null || cat /tmp/re[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b8afa9bd-c359-4b35-aa2f-401800d6a234","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-26T06:36:39.254878183+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"grep -c '\"full_name\"' /tmp/report_items.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0ef591d-5c20-4d12-b98e-2bbbe7548ce5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:36:57.245105548+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"grep -ri \"googlesuper\\|gmail\\|smtp\\|email\" /home/ice/.hermes/ 2>/dev/null | grep[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9c28b0cf-83a6-4ab1-9afc-a1fec9907c06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:37:10.525975853+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"which gws gapi 2>/dev/null || echo 'not installed'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"323c001b-2262-4edc-a4c6-f1d741b35a2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:37:16.453460410+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/skills/productivity/google-workspace/references/ 2>/dev[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a84c5207-5556-4621-8e20-c0978c0bf035","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-26T06:37:39.860717715+00:00","session_id":"40f01661-6dc0-4217-a5a0-ac9361f8fdbe","action":"Allow","rule_ids":[],"command_redacted":"which himalaya 2>/dev/null && himalaya --version || echo 'himalaya not installed[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5218fbb1-efd9-419e-aea7-07be3fe76a81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:30:40.706233006+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/trending > /tmp/gh_trending.html && wc -c /tmp/gh_tr[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad4dc908-93e9-4944-9f48-3577d1db448a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:30:46.341324236+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import bs4; print('BeautifulSoup disponível')\" 2>/dev/null || echo [...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f2d035a6-7501-483f-978a-fe29afa92c8c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:31:00.840900208+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_github_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0653f537-1fb8-455b-804e-4359ba85a9c6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:31:26.055380954+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_github_trending_v2.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b85c52e-816e-4d89-a282-8d357d58a076","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:31:32.009268159+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"grep -o 'href=\"/[^\"]*/[^\"]*\"' /tmp/gh_trending.html | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21019d8e-11df-42f8-9b80-5b72b7ccdec4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:31:37.102371104+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"grep -oE '/[a-zA-Z0-9_-]+/[a-zA-Z0-9_-]+' /tmp/gh_trending.html | sort -u | head[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19b6159f-03d9-4e51-982f-8503933e15e8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:31:50.338389223+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/parse_github_trending_v3.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d6abe5d5-9ce8-46ed-8836-8ba3ab22a181","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:31:57.916469034+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"curl -sL 'https://api.github.com/search/repositories?q=pushed:2026-06-26&sort=st[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88bfdc95-3f30-4b22-9c14-e14ff199a552","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:32:05.306780713+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"curl -sL 'https://api.github.com/search/repositories?q=pushed:2026-06-26&sort=st[...redacted 157 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"22889370-8c21-4c31-b989-699d100b2785","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:32:13.138807409+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"curl -sL 'https://api.github.com/search/repositories?q=pushed:2026-06-26&sort=st[...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d434ca6-b469-45ff-ac48-89af04b24af0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:32:24.357900477+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/extract_top_repos.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2fe9f0f1-a3f7-405b-9a07-9140ed838a54","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:10.100231903+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/generate_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da04a544-8cc6-41d0-85bf-b1636464484d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:16.208487734+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"env | grep -iE 'telegram|TELEGRAM|gmail|gapi|sendgrid|mailgun|SENDGRID|MAILGUN|S[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"18b0e9d6-72e6-4df6-9733-1b77e6fd8f44","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:19.068864820+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"env | grep -iE 'token|TOKEN|bot|BOT' || echo \"Nenhuma variável encontrada\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1bc8377-3e26-46ca-8375-7c291da1ba72","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:24.579400392+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"which sendmail msmtp himalaya 2>/dev/null; ls -la /usr/sbin/sendmail /usr/bin/ms[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16116e84-1187-4f71-8e01-0cd59e17d83b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:32.389961129+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.config 2>/dev/null || true; find /home/ice -maxdepth 2 -type f[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70c2fe22-9716-4e4f-9d06-01d1785988d3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:46.488767602+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"sendmail -V 2>/dev/null; sendmail -bv root 2>&1 | head -10; echo \"---\"; python3 [...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c583b9ad-0e94-42ef-8001-a08227a2422e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:50.246908792+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"sendmail -V 2>/dev/null; echo \"exit:$?\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26af6629-7916-41b7-a41c-d13eea420140","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:33:55.872342806+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice -maxdepth 3 -type f \\( -name 'token.json' -o -name 'client_secret[...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"426e1747-f3f5-4904-86bd-b0259aaf4afc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:34:01.724319085+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"which mail ssmtp mutt msmtp 2>/dev/null; command -v curl","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5947aeb4-02e5-4d70-93b1-aba8f84a3bbc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:34:06.935482065+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i key || env | grep -i secret || env | grep -i pass || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7ba11d4c-b8e2-4df0-9839-8848be0c4d13","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:34:26.834630106+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"cat /etc/mail/sendmail.cf 2>/dev/null | head -20 || true; grep -r 'woney' /etc 2[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"92d513aa-22c8-4d3f-b25c-3a6524666203","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:34:39.286699730+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/translate_descriptions.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53e41f3a-4f9c-4b34-8921-15cb7f269349","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-27T06:35:09.494211438+00:00","session_id":"754f203d-4fcf-4cf8-8abc-c2bec64ee46c","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/generate_report.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62b068f8-9ce8-4089-9a21-8643ebb912b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-12T10:29:18.617654966+00:00","session_id":"32fb919e-4dd2-4547-b1cd-43bc6824550d","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport os, glob, json\nbase=os.path.expanduser('~/.hermes/cron')[...redacted 188 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e8d1fef8-175c-4b6f-8757-2a43637a75f6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-12T10:29:24.872752387+00:00","session_id":"32fb919e-4dd2-4547-b1cd-43bc6824550d","action":"Allow","rule_ids":[],"command_redacted":"hermes model --help | sed -n '1,120p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42757845-b6a7-4c56-82d3-78c9dd33a935","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-12T10:29:29.328374861+00:00","session_id":"32fb919e-4dd2-4547-b1cd-43bc6824550d","action":"Allow","rule_ids":[],"command_redacted":"hermes model --no-browser","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06c0424b-fdb8-4f8e-920b-558af0fd2bf5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-12T10:37:24.827621893+00:00","session_id":"32fb919e-4dd2-4547-b1cd-43bc6824550d","action":"Allow","rule_ids":[],"command_redacted":"hermes update && hermes doctor","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b90d0c9-c70d-4029-a6a8-be5d726d798f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-12T10:57:40.803854164+00:00","session_id":"32fb919e-4dd2-4547-b1cd-43bc6824550d","action":"Allow","rule_ids":[],"command_redacted":"hermes doctor --fix","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f5e276b-3175-4130-a8c2-c2aea45618cb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-12T11:00:04.290375495+00:00","session_id":"32fb919e-4dd2-4547-b1cd-43bc6824550d","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_daily.sh | sed -n '1,120p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1d6d24a-a529-4062-8d90-70525a2d43bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-12T11:00:13.414667056+00:00","session_id":"32fb919e-4dd2-4547-b1cd-43bc6824550d","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_daily.sh | sed -n '1,120p'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ffc9132-a91a-4e24-97a3-246385e62804","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-16T11:45:16.234086268+00:00","session_id":"6b7e4e3c-cff4-4d30-84b8-ef5b0342ef19","action":"Allow","rule_ids":[],"command_redacted":"ip a","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7946ecd1-a9fd-4dfd-9513-d64c9519efb9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-18T20:47:12.286580654+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s http://192.168.0.129:20128/ 2>&1 | head -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"554919af-36b4-4d56-85a2-f4fee8a6aaad","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-18T20:47:25.450655481+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s http://192.168.0.129:20128/api/health","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fda09d38-35bf-4f08-b95b-4ff185d82d13","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-18T20:47:43.361312138+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s http://192.168.0.129:20128/v1/models | python3 -m json.tool | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bcf5a98e-d794-4c76-9557-d2bef3c3f841","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-18T20:47:55.211657011+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -H \"Authorization: Bearer sk-816490999cf5544d-c5p5gn-248dd601\" http://19[...redacted 61 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f3233d4-9d58-4032-aa98-4a540a2a0227","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-18T20:50:59.370132101+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s http://192.168.0.129:20128/v1/models/web | python3 -m json.tool | head -[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba776864-e769-4fc9-bb2d-eb10a12db1f8","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-18T20:52:48.053471499+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s http://192.168.0.129:20128/v1/models/tts -H \"Authorization: Bearer sk-81[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"471e57e7-d427-450c-b379-2ec25285a121","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-18T20:52:59.436222477+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s \"http://192.168.0.129:20128/v1/audio/voices?provider=edge-tts&lang=pt\" -[...redacted 74 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"73a19ade-60bb-44c7-ba4d-a3d1fdffca63","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-18T20:53:00.503141397+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s \"http://192.168.0.129:20128/v1/models/info?id=gemini/gemini-2.5-flash-pr[...redacted 75 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"605969ca-1d27-46fc-af71-25bcc8c3ff61","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-18T20:53:04.199391736+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s 'http://192.168.0.129:20128/v1/audio/voices?provider=edge-tts&lang=pt' -[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c90f26fd-a7e6-4e98-b10a-9819d62ff966","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-18T20:53:05.283026711+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s 'http://192.168.0.129:20128/v1/models/info?id=gemini/gemini-2.5-flash-pr[...redacted 108 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e161476-0069-4add-b1ab-929bcc6ce9c9","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","schemeless_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-18T20:56:38.951144363+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Allow","rule_ids":[],"command_redacted":"hermes config set tts.provider edge","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d137016-5a4e-4f92-8645-9678d25bdfd8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-18T20:56:40.385608695+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Allow","rule_ids":[],"command_redacted":"hermes config set tts.edge.voice pt-BR-FranciscaNeural","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba82f2ff-2195-421e-921a-72b71d3fd6bb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-18T20:56:41.690576585+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Allow","rule_ids":[],"command_redacted":"hermes config set tts.speed 1.0","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1fffa035-7caf-4e6e-8fd9-ab279ca25513","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-18T20:56:54.318219248+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Allow","rule_ids":[],"command_redacted":"hermes config get tts","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a7ab9ad-d8b1-4592-afb7-eb69dcce2e1c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-18T20:57:02.393047491+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Allow","rule_ids":[],"command_redacted":"grep -A5 '^tts:' /home/ice/.hermes/config.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49ce7dd8-0fac-4f90-9084-b1a7d04f2424","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-18T21:00:04.442953814+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Allow","rule_ids":[],"command_redacted":"hermes doctor","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ce895ccc-bc3d-440b-8155-bd3aa8503f70","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-18T21:07:12.532552162+00:00","session_id":"8b8bdb97-777c-4546-93f9-4631315f9284","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search \\\n  -H \"Authorization: Bear[...redacted 211 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b3cea75b-f333-4fb3-bee4-f1554383d2cf","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-19T16:49:10.171952458+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/decolua/9router\" | python3 -c \"import json[...redacted 253 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2fb80d7f-eec1-438b-bb93-e10dd3802def","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:24.754958425+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/rohitg00/agentmemory\" | python3 -c \"import[...redacted 258 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"77111aaa-1786-499d-8b2a-1c34e10ff121","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:26.187166702+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/addyosmani/agent-skills\" | python3 -c \"imp[...redacted 261 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f32d4281-eb04-4625-a3ea-5efd8efe1b8e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:27.620782287+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/bytedance/UI-TARS-desktop\" | python3 -c \"i[...redacted 263 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a81277c6-44d9-4d35-83f2-bd9c18878da3","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:29.054099606+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/Lordog/dive-into-llms\" | python3 -c \"impor[...redacted 259 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bf261bb-d42c-4939-ae56-324819411aae","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:30.488015513+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/datawhalechina/hello-agents\" | python3 -c [...redacted 265 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf910a24-1ac5-463a-bd0c-54993817c7ea","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:31.920903209+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/anthropics/financial-services\" | python3 -[...redacted 267 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"08dd71f9-3343-4ec9-82a7-64855801b679","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:40.735197370+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/decolua/9router/readme\" | python3 -c \"impo[...redacted 105 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff026434-ca3a-4a75-bf93-8ab981d169c5","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:42.170291848+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/rohitg00/agentmemory/readme\" | python3 -c [...redacted 110 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"305620e2-194a-4a54-a742-0ad57181425a","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:43.604578014+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/addyosmani/agent-skills/readme\" | python3 [...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f652da5-786d-49aa-80aa-4acf1cd7736e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:45.042816120+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/bytedance/UI-TARS-desktop/readme\" | python[...redacted 115 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"422741e4-b7c4-4959-8d3f-b0560911adcc","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:46.484066581+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/Lordog/dive-into-llms/readme\" | python3 -c[...redacted 111 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30d6664b-3b73-44bf-a1bb-b78342a4f874","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:47.921009279+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/datawhalechina/hello-agents/readme\" | pyth[...redacted 117 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b01eaaf4-586e-4b17-b57b-a35f32c045d1","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:49:49.228823863+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/anthropics/financial-services/readme\" | py[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5735b8f5-f794-4050-82fd-a77744a2c980","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:50:37.450791378+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/rohitg00/agentmemory/contents/README.md\" |[...redacted 317 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72539afc-133c-413f-8cfe-092b8bc68897","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:50:38.887235825+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"# Check agent-skills directory structure  \ncurl -s \"https://api.github.com/repos[...redacted 154 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"28d9f525-77c7-4cb8-a9c4-8dc7b4a07996","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:50:40.191412314+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"# Get financial-services plugin structure\ncurl -s \"https://api.github.com/repos/[...redacted 174 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d0ef5cb-ebf5-44f2-a4b3-1b14ba32845b","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-07-19T16:50:41.497252852+00:00","session_id":"fcabd7eb-aac9-4395-a9d2-9ba7fbfb2043","action":"Allow","rule_ids":[],"command_redacted":"# Check agentmemory README for more details - install for agents\ncurl -s \"https:[...redacted 88 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbe3d030-ff3e-4cd4-a035-5691c717e621","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T10:15:03.370382253+00:00","session_id":"6a54dd72-7342-45c4-8fce-fc23796a3f1e","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/cron/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d4c8510a-0bbb-4e82-956b-10d549f7dfc4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T10:15:07.304347692+00:00","session_id":"6a54dd72-7342-45c4-8fce-fc23796a3f1e","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/cron/output/ && echo \"---\" && ls -la /home/ice/.hermes/[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7122fb9f-7f37-44ee-acff-a2b1b6f3eda3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T10:15:09.971830085+00:00","session_id":"6a54dd72-7342-45c4-8fce-fc23796a3f1e","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/cron/output/d626a1e54056/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9c4a32b-2c0c-4650-9314-cec4ed4e15b4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T10:16:00.096509869+00:00","session_id":"6a54dd72-7342-45c4-8fce-fc23796a3f1e","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep -E ':(3000|8080|80|443) ' || echo \"no common ports\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33aa8118-0235-409d-9d05-906e3d1a836c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T10:16:05.574346178+00:00","session_id":"6a54dd72-7342-45c4-8fce-fc23796a3f1e","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && python3 -m http.server 8080 --bind 0.0.0.0","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b37199cf-60cc-43f6-a8bc-43fe26523fcf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T10:16:08.065788417+00:00","session_id":"6a54dd72-7342-45c4-8fce-fc23796a3f1e","action":"Allow","rule_ids":[],"command_redacted":"sleep 1 && curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8080/github-t[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8778d696-eab9-4afb-840c-300ff3f9221f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T10:16:11.851848442+00:00","session_id":"6a54dd72-7342-45c4-8fce-fc23796a3f1e","action":"Allow","rule_ids":[],"command_redacted":"hostname -I | head -1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"364aa6d8-e3ce-496b-bfb9-2b70774035b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T23:00:46.853846359+00:00","session_id":"07f30f79-a65b-4145-b6d8-7ddac31477b5","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://openship.io | head -200","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42de4418-4558-4423-9aab-49cf918d869f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T23:00:56.562019279+00:00","session_id":"07f30f79-a65b-4145-b6d8-7ddac31477b5","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://openship.io/mail | grep -oP '(?<=<title>)[^<]+|(?<=<meta name=\"[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"82a66006-324d-4365-b767-d4a8ed8cda3f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T23:00:58.783328147+00:00","session_id":"07f30f79-a65b-4145-b6d8-7ddac31477b5","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://github.com/oblien/openship | grep -oP '(?<=<title>)[^<]+' | hea[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c75a7205-2a50-46a2-ab72-6dcad02055de","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T23:01:03.243979917+00:00","session_id":"07f30f79-a65b-4145-b6d8-7ddac31477b5","action":"Allow","rule_ids":[],"command_redacted":"curl -sL https://openship.io/mail | sed 's/<[^>]*>//g' | sed '/^$/d' | head -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a69f4303-22b1-4886-a9f2-70cbc62103f0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T23:05:58.278732207+00:00","session_id":"07f30f79-a65b-4145-b6d8-7ddac31477b5","action":"Allow","rule_ids":[],"command_redacted":"hermes update","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d2d60a33-9b7a-47c3-b745-93e0b5c86e7c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T23:08:07.828327095+00:00","session_id":"07f30f79-a65b-4145-b6d8-7ddac31477b5","action":"Allow","rule_ids":[],"command_redacted":"hermes --version 2>/dev/null || cat /home/ice/.hermes/hermes-agent/hermes_cli/ve[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da87fc1c-675b-42b7-8522-580e95dea316","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-20T23:09:05.650661026+00:00","session_id":"07f30f79-a65b-4145-b6d8-7ddac31477b5","action":"Allow","rule_ids":[],"command_redacted":"hermes doctor","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aaa56734-fa80-46dc-af43-e84ae4dcb6ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-22T15:49:24.888738587+00:00","session_id":"a6abeaa6-fc4b-4c3d-8dce-a879f717c71d","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/cron/output/ 2>/dev/null || echo \"NO_OUTPUT_DIR\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"56bc4047-0f82-4430-a11a-cfc7d71b0166","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-22T15:49:28.057330527+00:00","session_id":"a6abeaa6-fc4b-4c3d-8dce-a879f717c71d","action":"Allow","rule_ids":[],"command_redacted":"ls -lt /home/ice/.hermes/cron/output/d626a1e54056/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bcc0b707-1989-412d-bb13-463501ae709a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:22:30.911014732+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"find /home/ice/.hermes/cron/output/d626a1e54056 -name '*.md' -type f | sort -r |[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9810a1bb-4fed-4fec-a0fd-d53a297ceeff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:22:31.968949146+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/hermes-landing/ 2>/dev/null || echo \"no landing dir\"; ls /home/[...redacted 106 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a71c9e5-c015-4639-a77a-521824dd652c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:22:39.577627571+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"curl -fsSL --retry 3 --retry-delay 2 'https://github.com/trending' 2>/dev/null |[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a41e727e-1772-4dc1-97c2-b88952da8230","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:22:41.807886590+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"# Check if there's a simple HTTP server running for landing pages\npgrep -f \"http[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"43934503-2c6c-4606-975e-d9f33d5f0e2d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:23:04.981075669+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /home/ice/.hermes/cron/jobs.json | python3 -c \"import sys,json; d=json.load([...redacted 121 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9ea96c98-1d7f-4390-971a-e36a10e24ece","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-07-23T09:24:07.112304430+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"# Check ports in use and if we can use 8080\nss -tlnp 2>/dev/null | grep -E '8080[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6da042b2-f7e9-4982-908b-883b21f3f704","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:25:05.398952637+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_daily.sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c1d3e2b7-a167-4f47-be03-4bf1bcb11e92","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:25:10.842963697+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://192.168.0.20:8080/github-trending.[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2aadcf0c-5cff-4616-a52b-82f6f7863ae0","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-23T09:26:09.163777014+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s http://192.168.0.20:8080/github-trending.html | head -60","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df8fdb87-b043-4617-a74f-c7af8c65c141","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-23T09:26:23.848168375+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ice/.hermes/landing/github-trending.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0fe6c3e-a06c-49f8-9a05-d6c922d4505c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:41:42.466829897+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"echo \"GITHUB_TOKEN=${GITHUB_TOKEN:-none}\" && echo \"GH_TOKEN=${GH_TOKEN:-none}\" &[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a879dcc-0f6a-492b-bd2d-ecb1bc5cf3a3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:41:46.389805644+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"# Test GitHub API access\ncurl -fsSL -o /dev/null -w \"%{http_code}\" \"https://api.[...redacted 258 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"28515353-f832-4c7e-b227-d449544772ce","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:42:11.478182824+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49e89e6e-d35d-48a7-ab91-5e763b7257ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:42:19.254310555+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"JSON_PATH=$(bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/nul[...redacted 315 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cff2c8af-ef00-463c-814d-8123e3b70149","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:42:40.463002849+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"JSON_PATH=$(bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/nul[...redacted 439 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c461aa5c-c5d2-41da-9e8d-ec346a054576","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:43:28.729996651+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"JSON_PATH=$(bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/nul[...redacted 80 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b1c104f-a9ca-47e7-88a0-4776c4d3a2bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:43:36.275081075+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"# Verify generated files\necho \"=== Landing files ===\"\nls -la /home/ice/.hermes/l[...redacted 300 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a75b1463-4043-4f2e-8f02-2c25314704d9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:43:41.413668134+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"],"command_redacted":"# Check what the current HTTP server is serving\nps -p 36401 -o cmd= 2>/dev/null [...redacted 214 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b68e1dfe-055e-4466-9cf2-25c7ba226e7f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"]}
{"timestamp":"2026-07-23T09:43:45.341361108+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"# Remove old landing page, keep only date-stamped files + index\nrm -f /home/ice/[...redacted 70 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"12e459c7-6b13-4164-9d2f-13812bb1fe16","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:44:19.606040428+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"# Check if systemd user services are available\nsystemctl --user list-units --typ[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e29ade0e-44a5-4ef3-9bf4-fecfbaa8342e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:46:10.561854091+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"# Kill the current ad-hoc server\npkill -f \"http\\.server.*landing\" 2>/dev/null ||[...redacted 422 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f2b4a989-4298-4eeb-8bdf-615406160fa0","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-23T09:46:53.780178226+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e136a33-e7b2-405f-a4a7-899300404df7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:47:04.138702922+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.RSr4KC18Y[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f853541-46dd-4686-b015-84bfd89c4370","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:47:23.562467629+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"pgrep -f \"http.server.*landing\" || python3 -m http.server 8080 --directory ~/.he[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"65ff3e45-89cd-4586-9785-bf94236b64a2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:47:30.855854798+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/tmp.RSr4KC18YU/trending_data.json') as [...redacted 317 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bfb73705-7d4b-477b-b731-471e8fb4cc53","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:50:57.555932366+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i telegram 2>/dev/null; echo \"---\"; grep -r \"telegram\\|bot_token\\|BO[...redacted 141 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f5e8caf7-eeab-4636-991b-123ba8429f10","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:51:28.665312508+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"grep -A 20 \"^telegram:\" /home/ice/.hermes/config.yaml 2>/dev/null; echo \"===\"; g[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bdcf0dbb-661e-4cf9-9403-663164894b58","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:51:34.453018756+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/tmp.RSr4KC18YU/trending_data.json') as [...redacted 585 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"28326df8-8c11-4d7a-864a-53c18140e853","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:52:33.067575899+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Warn","rule_ids":["variation_selector"],"command_redacted":"cat > /tmp/enhanced_cards.py << 'PYEOF'\nimport json, re\nfrom pathlib import Path[...redacted 15152 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f878b825-e262-4e81-8118-95542bdbe35e","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["variation_selector"]}
{"timestamp":"2026-07-23T09:53:12.549602200+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Warn","rule_ids":["variation_selector"],"command_redacted":"python3 << 'PYEOF'\nimport json, re\nfrom pathlib import Path\n\ndef esc(s):\n    ret[...redacted 14393 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"92f6516b-3bc3-4e96-8c92-7cc787350483","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["variation_selector"]}
{"timestamp":"2026-07-23T09:53:24.804567559+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"pgrep -f \"http.server.*landing\" >/dev/null && echo \"✅ HTTP server running\" || [...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"51578497-e2db-46ab-9b6c-8699d5bf85ff","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T09:53:42.424944797+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/landing/ && echo \"---\" && wc -c /home/ice/.hermes/landi[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16733a7f-c099-411f-950f-2c20832a3648","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:00:40.279529812+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"grep -n 'break\\|repos\\b.*limit\\|len(repos)' /home/ice/.hermes/scripts/github_tre[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b1db9301-83dc-48ee-a4fa-a8d68797bd18","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:00:46.758935841+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"grep -n '10\\|top.*10\\|Top.*10\\|10 re' /home/ice/.hermes/scripts/github_trending_[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df9abf38-7908-497e-8e29-4be5ae614b52","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:05:28.090614743+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42ebd204-acae-4dc2-9fa9-12fa5e8f963b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:08:16.454883427+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.ZkhsTc9O9[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a8766c67-ccc3-4f9c-94b7-81dfdee5e41e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:10:12.692795756+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"which telegram-send telegram-cli telethon-cli 2>/dev/null; ls ~/.config/telegram[...redacted 92 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5babb7f-bc37-43ae-a3ed-32060eea6292","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:10:34.770429658+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"pgrep -af \"http.server\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"58f2c052-1d76-4d92-b316-0dddce660f05","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:10:35.830907719+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/landing/ 2>/dev/null; echo \"---\"; ls ~/.hermes/scripts/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0f105c69-de78-4d75-bf53-e4622cb4a8e6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:10:36.921425183+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"which curl wget 2>/dev/null; echo \"---\"; env | grep -i telegram 2>/dev/null; ech[...redacted 109 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c85597be-143b-40ae-921c-31966855d4cd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:11:38.034860565+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/tmp.ZkhsTc9O9t/trending_data.json') as [...redacted 244 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1c760850-02c7-4e8a-8ec2-76fc81373891","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:11:48.428107608+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/tmp.ZkhsTc9O9t/trending_data.json') as [...redacted 211 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"582845cf-b0af-4730-818b-956fa8ae93ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:12:00.850627697+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Block","rule_ids":["invalid_host_chars"],"command_redacted":"python3 -c \"\nimport json, re\n\nwith open('/tmp/tmp.ZkhsTc9O9t/trending_data.json'[...redacted 1129 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3a5076b-86bd-4a61-af90-d1915586586f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["invalid_host_chars"]}
{"timestamp":"2026-07-23T10:15:06.721044395+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"pgrep -af \"python3.*http\\.server.*8080\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"11ddf61d-c115-484c-98d0-e78b1cfdd80a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:15:34.140206805+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/landing/ && echo \"---\" && wc -c /home/ice/.hermes/landi[...redacted 89 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b2684dc-3254-4b88-b5b1-d57942493667","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:15:40.266196868+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"grep -c 'rank-badge' /home/ice/.hermes/landing/2026-07-23.html && grep -c 'card-[...redacted 116 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e28ebc57-7253-4343-87c0-ba3d76ada98a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:15:43.819826187+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"head -100 /home/ice/.hermes/landing/2026-07-23.html | grep -n 'rank\\|card\\|repo'[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5e8e8880-0dec-4e7c-b43a-6f913a33604a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-23T10:15:47.228592620+00:00","session_id":"f3d457d8-dc41-4b32-9af9-02ff6c1cba28","action":"Allow","rule_ids":[],"command_redacted":"grep -c 'class=\"card ' /home/ice/.hermes/landing/2026-07-23.html && echo \"cards\"[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4e54f7aa-0fbe-42c3-97dc-37aca5b81224","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-24T06:34:57.422459417+00:00","session_id":"ad996b9e-17e5-4c8b-a964-7eb1803c42a8","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c9adced1-75ed-4a1b-aaec-2b33e4adf9e6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-24T06:35:10.381047604+00:00","session_id":"ad996b9e-17e5-4c8b-a964-7eb1803c42a8","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.bE6VjbL0E[...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"573a3cc8-828b-4456-886d-827f59180e7b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-24T06:35:31.349992878+00:00","session_id":"ad996b9e-17e5-4c8b-a964-7eb1803c42a8","action":"Allow","rule_ids":[],"command_redacted":"python3 -m http.server 8080 --directory ~/.hermes/landing","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"96f757b6-4f92-4fc0-a117-5281c365dc10","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-24T09:22:23.764889186+00:00","session_id":"ad996b9e-17e5-4c8b-a964-7eb1803c42a8","action":"Allow","rule_ids":[],"command_redacted":"hermes update","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2c080520-e294-4ce4-b6e8-a8056e3079f3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-24T09:24:42.634408529+00:00","session_id":"ad996b9e-17e5-4c8b-a964-7eb1803c42a8","action":"Allow","rule_ids":[],"command_redacted":"hermes --version 2>/dev/null || echo \"versão não encontrada\"; ls -la ~/.hermes[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d1a8d37-1ffd-49e1-9fe6-e38e1b606a75","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T06:30:30.592323210+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a4a225e-d50b-4692-9802-2a645354fc7c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T06:30:43.788934769+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.6G6JD1GHT[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2a9f5094-b118-4e2a-b64f-20e1e154ea59","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T06:31:01.141869942+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Allow","rule_ids":[],"command_redacted":"python3 -m http.server 8080 --directory /home/ice/.hermes/landing","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7dd6aa15-be8e-4e86-8c6e-db4057a2238c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T06:31:28.710629360+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /tmp/tmp.6G6JD1GHTp/trending_data.json | python3 -c \"\nimport json,sys\ndata=j[...redacted 291 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"501690a5-e027-44d2-a81b-c325df0a5ba2","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-07-25T06:31:38.299078212+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Allow","rule_ids":[],"command_redacted":"chmod +x /tmp/analyze_trending.py && python3 /tmp/analyze_trending.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bc5a937-9ead-4668-b867-56c2fff2cf1d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T06:31:42.426942253+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/tmp.6G6JD1GHTp/trending_data.json') as [...redacted 161 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d0077219-0f99-445c-9054-642fb0eaecb2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T06:39:22.502713534+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/enhance_landing.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b0630316-771c-428a-a123-acd5c7011f6b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T06:39:31.743762739+00:00","session_id":"c3094b63-5f49-423c-aafa-766408a8a338","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/2026-07-25.html | head -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b65d70bb-7b6d-4c7f-a2ac-79ee5115edd8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T11:10:31.806606020+00:00","session_id":"008120e5-3645-43ad-90f1-bd9c06520e7a","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://api.ipify.org?format=json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e73ff69-2536-401a-9d6f-731cc558dbee","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T11:10:33.050535770+00:00","session_id":"008120e5-3645-43ad-90f1-bd9c06520e7a","action":"Allow","rule_ids":[],"command_redacted":"curl -s https://ifconfig.me","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a149f714-d956-4d59-978f-e628bfe5ee59","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T11:10:40.630253117+00:00","session_id":"008120e5-3645-43ad-90f1-bd9c06520e7a","action":"Allow","rule_ids":[],"command_redacted":"hostname && echo \"---\" && ip -4 addr show | grep inet | grep -v 127.0.0.1 && ech[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5df21ca3-72b5-44ac-ab73-ef647dc2c68f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T23:21:53.979752031+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"cp /home/ice/.hermes/skills/gis-mapping-applications/references/project-showcase[...redacted 103 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b91fd252-a88b-49bd-97a4-868ea985a74a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T23:21:56.574774721+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/geo-platform.html | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"02c6182d-59b9-4723-bcd2-99d2095c50d0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T23:35:00.464555007+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/geo-platform.html | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36c997a0-059f-4d49-bf46-44c8323a4366","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T23:54:58.787412339+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/geo-platform.html | grep -c \"Virtual Survey\\|Colet[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"78c00557-c4fe-4441-afe8-90a9b5554dc1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-25T23:58:26.229057879+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"uname -m && echo \"---\" && sysctl -n machdep.cpu.brand_string 2>/dev/null; which [...redacted 101 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f19e8d0-d11e-45c8-a0d9-8d9646f908e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:07:55.183028807+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"wc -l /home/ice/.hermes/cache/delegation/live/deleg_90a1dac7/task-0.log 2>/dev/n[...redacted 120 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c08f5923-e833-4f72-adfe-204916f63f8c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:08:04.209639344+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 15 && tail -30 /home/ice/.hermes/cache/delegation/live/deleg_90a1dac7/task[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36f9f99d-4787-44f0-99fa-29a505cfa11a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:08:22.120205606+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 20 && tail -40 /home/ice/.hermes/cache/delegation/live/deleg_90a1dac7/task[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5cb7e47-430f-4675-810d-9e1c6b12f62c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:08:45.098495673+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 25 && tail -60 /home/ice/.hermes/cache/delegation/live/deleg_90a1dac7/task[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"60fa94d1-a7cc-481e-8f07-47d6fecd7742","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:09:14.047093349+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 15 && tail -30 /home/ice/.hermes/cache/delegation/live/deleg_90a1dac7/task[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ede9aeb-a9c9-4399-a456-2aba6e42cd3c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:10:10.529896031+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 20 && tail -10 /home/ice/.hermes/cache/delegation/live/deleg_90a1dac7/task[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74f09e10-3f50-4eb5-bc75-1e64951eed78","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:18:32.253435589+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/geo-platform.html | grep -c \"Vigia\\|Coleta Virtual[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"20ac863a-0d39-42a9-9069-f2f015b559f4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:18:35.709057888+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"wc -l /home/ice/.hermes/landing/geo-platform.html && curl -s http://localhost:80[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a7fdb48-73d2-49d8-a0dc-9ecc61223994","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:24:48.203621268+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"cp /home/ice/fontes-street-level-imagery.md /home/ice/.hermes/skills/gis-mapping[...redacted 296 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00a41d8a-b56a-4af1-b3d0-7854c2036bc7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:30:46.279843965+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/geo-platform.html | grep -c \"Invasões\\|Construç[...redacted 72 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5494c0b-9223-4f99-addf-94163fc3645d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:34:37.785657667+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/geo-platform.html | wc -c && curl -s http://localh[...redacted 75 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"880b57da-2eaf-4c9c-98dc-3c47271d509f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:41:49.203861574+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"which curl wget jq python3 2>/dev/null; echo \"---\"; curl --version 2>&1 | head -[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"37c8e28c-d598-450c-ad06-39c084989071","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:41:58.073260976+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"wc -l /home/ice/.hermes/cache/delegation/live/deleg_da61103f/task-0.log /home/ic[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"07506702-84e4-4afa-93d0-cfd3ff1683e2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:42:09.742943251+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"tail -15 /home/ice/.hermes/cache/delegation/live/deleg_da61103f/task-0.log 2>/de[...redacted 117 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1eff95c0-7d63-408f-a23f-0108b60dec06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:42:14.627296352+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 30 && tail -5 /home/ice/.hermes/cache/delegation/live/deleg_da61103f/task-[...redacted 127 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6827623a-2d82-4073-b393-56db7e9d2e51","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:42:50.837643711+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 45 && wc -l /home/ice/.hermes/cache/delegation/live/deleg_da61103f/task-0.[...redacted 294 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"147598c3-4bfa-41da-a900-893ebf7cf8a1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:43:48.704909499+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 60 && tail -5 /home/ice/.hermes/cache/delegation/live/deleg_da61103f/task-[...redacted 120 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5817bc56-779c-48fa-a9ae-357180c4d3b3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:46:06.283466050+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Block","rule_ids":["raw_ip_url","curl_pipe_shell"],"command_redacted":"export NINEROUTER_URL=\"http://192.168.0.129:20128\" && export NINEROUTER_KEY=\"sk-[...redacted 478 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d3064567-33a7-40fc-bb9c-e5c2c97c57b6","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","curl_pipe_shell"]}
{"timestamp":"2026-07-26T00:46:16.013542840+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Block","rule_ids":["raw_ip_url","curl_pipe_shell"],"command_redacted":"export NINEROUTER_URL=\"http://192.168.0.129:20128\" && export NINEROUTER_KEY=\"sk-[...redacted 503 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d5b7d776-f097-4f36-ad6d-f5ec2ff3cf81","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","curl_pipe_shell"]}
{"timestamp":"2026-07-26T00:46:19.440113100+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Block","rule_ids":["raw_ip_url","curl_pipe_shell"],"command_redacted":"export NINEROUTER_URL=\"http://192.168.0.129:20128\" && export NINEROUTER_KEY=\"sk-[...redacted 525 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"04a72562-430c-4e3c-a786-616f6f7b52b4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","curl_pipe_shell"]}
{"timestamp":"2026-07-26T00:46:22.266090213+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Block","rule_ids":["raw_ip_url","curl_pipe_shell"],"command_redacted":"export NINEROUTER_URL=\"http://192.168.0.129:20128\" && export NINEROUTER_KEY=\"sk-[...redacted 521 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6de711fa-5ccf-4d13-a016-90d1d69e97d7","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","curl_pipe_shell"]}
{"timestamp":"2026-07-26T00:46:25.292682982+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Block","rule_ids":["raw_ip_url","curl_pipe_shell"],"command_redacted":"export NINEROUTER_URL=\"http://192.168.0.129:20128\" && export NINEROUTER_KEY=\"sk-[...redacted 493 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"341927a9-0b45-47b9-993c-303ade7f607f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","curl_pipe_shell"]}
{"timestamp":"2026-07-26T00:46:27.519266741+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Block","rule_ids":["raw_ip_url","curl_pipe_shell"],"command_redacted":"export NINEROUTER_URL=\"http://192.168.0.129:20128\" && export NINEROUTER_KEY=\"sk-[...redacted 513 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d1d921a4-93ef-4722-ac29-61964297fa42","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","curl_pipe_shell"]}
{"timestamp":"2026-07-26T00:46:41.693161465+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 40 && tail -8 /home/ice/.hermes/cache/delegation/live/deleg_1081dc07/task-[...redacted 120 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f028360a-c2a7-4b82-a77d-0ef89fb0012a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:47:28.885184540+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 30 && tail -5 /home/ice/.hermes/cache/delegation/live/deleg_1081dc07/task-[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c12bf097-eba3-48ec-af06-10f983eb353d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:48:23.066460025+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 60 && wc -l /home/ice/.hermes/cache/delegation/live/deleg_1081dc07/task-0.[...redacted 230 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bc158e8b-2311-45af-ab36-6549dd9705a1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:49:29.992636463+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 90 && wc -l /home/ice/.hermes/cache/delegation/live/deleg_1081dc07/task-0.[...redacted 230 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81e0950f-21b3-4e18-b03d-fb8078dcee85","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:51:09.466910684+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"sleep 120 && wc -l /home/ice/.hermes/cache/delegation/live/deleg_1081dc07/task-0[...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bb056a57-c5ee-48f7-b27d-f249c1478ac4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T00:56:42.910853089+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Allow","rule_ids":[],"command_redacted":"cp /home/ice/.hermes/landing/geo-platform.html /home/ice/.hermes/landing/geo-pla[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1461a21a-5098-46d1-9cc1-d47948d199bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T01:16:43.771212070+00:00","session_id":"88185bf4-3a48-42ef-9217-8520b7f318d3","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"wc -l /home/ice/.hermes/landing/geo-platform-visao-glm.html && ls -lh /home/ice/[...redacted 138 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aa79165a-a7bb-4821-a827-fcb0d648820d","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-26T06:30:40.035947854+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52537a30-5ad6-4e75-8f63-6f3ec511a49a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T06:31:09.357813045+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/tmp.D11uv36OcF/trending_data.json') as [...redacted 129 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c7577cf-1073-4490-82dd-1feba661fae5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T06:31:13.169198168+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.D11uv36Oc[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec4b39ef-1f7c-4514-b53a-09049ce8d037","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T06:31:24.687480435+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"pgrep -f \"http.server\" > /dev/null 2>&1 && echo \"running\" || echo \"not running\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"325832e4-cf64-4d4c-9cfb-ca8bd3982960","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T06:31:34.482742359+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json, re, sys\nwith open('/tmp/tmp.D11uv36OcF/trending_data.j[...redacted 414 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d18b6cce-80c2-4767-b2cb-aaec39401796","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T06:32:43.854339945+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8080/ && echo \" - index [...redacted 108 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f6d29d50-47c0-4e96-a31d-279cd332a015","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T09:44:08.313391969+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s http://192.168.0.20:8080/geo-platform.html | head -n 30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e2ea5078-27f9-4e70-ae4c-0d47306cc2b4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-07-26T09:44:13.293987667+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"lsof -i :8080 || ps aux | grep http.server || netstat -tuln | grep 8080","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f2e5ec77-0347-4961-8e4f-0703482208b9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T09:44:15.223774475+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"ls -l /proc/36808/cwd","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b3f79f0-16a6-42fa-9558-572c0e33920b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T09:57:01.033760080+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"],"command_redacted":"curl -s http://192.168.0.20:8080/geo-platform.html | grep -c \"MarketIntel\" && ec[...redacted 96 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14c31d02-fd90-4396-9130-f9adb05166d1","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"]}
{"timestamp":"2026-07-26T09:57:10.394831256+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"],"command_redacted":"echo \"=== geo-platform.html ===\" && curl -s http://192.168.0.20:8080/geo-platfor[...redacted 298 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9eb15c18-181c-4501-a87d-97c82ee9bd47","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"]}
{"timestamp":"2026-07-26T09:57:16.446232993+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"],"command_redacted":"echo \"=== geo-platform.html ===\" && curl -s http://192.168.0.20:8080/geo-platfor[...redacted 214 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b962292e-e44a-40b2-98d2-058200e36ff1","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"]}
{"timestamp":"2026-07-26T09:57:24.071021462+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"],"command_redacted":"echo \"=== geo-platform: '9 produtos' ===\" && curl -s http://192.168.0.20:8080/ge[...redacted 197 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c786d549-95cb-4f9b-acaf-34a5848f8444","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"]}
{"timestamp":"2026-07-26T09:57:47.554164633+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"],"command_redacted":"echo \"=== geo-platform.html ===\" && curl -s http://192.168.0.20:8080/geo-platfor[...redacted 228 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2494e53-558e-45d0-998e-83b51c12f64f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access"]}
{"timestamp":"2026-07-26T10:11:30.131692085+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://developers.google.com/maps/documentation/geocoding/usage-and-bi[...redacted 136 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cccc09ad-d799-4dc4-a78b-6aa47c1b9022","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T10:11:42.257842473+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://geocode.maps.co/\" 2>/dev/null | grep -i \"\\$\\|free\\|limit\\|price[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4e5d8146-b2b5-4ec2-9fe7-fa8a5d366854","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T10:11:43.880327441+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://nominatim.org/release-docs/latest/api/Overview/\" 2>/dev/null | [...redacted 181 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e8982663-4bf5-4017-810b-66869a7b9689","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T10:19:49.386819045+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"grep -n \"Por que isso é valioso\\|class=\\\"flow\\\"\" /home/ice/.hermes/landing/geo-[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7ff3d0ff-b9e9-45de-b1f6-3518762e6e27","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T10:20:35.388828821+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Allow","rule_ids":[],"command_redacted":"grep \"Geocodificação\\|OSM local\\|Nominatim\" /home/ice/.hermes/landing/geo-plat[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5780a51b-3afa-43c1-9fff-a6e056c29de2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-26T10:20:57.538917869+00:00","session_id":"76786720-7d24-4b56-b13b-292e7adf8595","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access","private_network_access","private_network_access"],"command_redacted":"echo \"=== MarketIntel section check ===\" && curl -s http://192.168.0.20:8080/geo[...redacted 356 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c850d4ea-54c2-4fe4-8427-e2cb1680b7c4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","raw_ip_url","plain_http_to_sink","private_network_access","private_network_access","private_network_access","private_network_access"]}
{"timestamp":"2026-07-26T11:21:18.197400351+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 364 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"485ce101-aee6-4307-b407-d9d4534fad11","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-26T11:21:21.625545308+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 357 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"340f6e6e-3efe-4381-892e-a0b034add4fb","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-26T11:21:32.930702245+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 398 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6cf37734-2e9f-4e57-ae84-3fd7e3c9b549","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-26T11:21:35.956024614+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 370 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eea8d976-ca08-4f61-a497-f00220695015","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-26T11:21:51.467542497+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 365 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"432fe453-74ed-42e3-aeff-e86f93c5cd40","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-26T11:21:54.893120433+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 372 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cdf231ec-e7e9-459e-a0ab-7584fbd7cf6b","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-26T11:22:07.397682460+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 374 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d6114461-6311-4b8d-9150-c2d73cfa7e1e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-26T11:22:10.423109175+00:00","session_id":"4bf3180f-139f-422c-aadd-219276065128","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"],"command_redacted":"curl -s -X POST http://192.168.0.129:20128/v1/search -H \"Authorization: Bearer s[...redacted 353 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36ba3b27-3317-423a-a222-e155b4f664bd","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","curl_pipe_shell","private_network_access"]}
{"timestamp":"2026-07-27T06:32:28.657261269+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/scripts/github_trending_collect.sh /home/ice/.hermes/sc[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"60387f5e-5781-4b89-8723-7782bd5332eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:32:29.691731474+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/landing/ 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f2c3dc2-3e93-4591-b127-4492808179ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:34:04.071991285+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d7e5317d-d87f-4185-ab53-8cd2c7e5805d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:34:37.412327428+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4134780e-3e45-453a-a24a-03ef01b85927","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:34:59.133353321+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/tmp.CpCmmHktIi/trending_data.json') as [...redacted 305 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4bc753e6-26ed-4c1f-83c0-4ed047af9af3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:35:15.119232719+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.CpCmmHktI[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f06d2817-7930-4cdb-abce-5e7c2e22cc27","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:35:51.730355646+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"python3 -m http.server 8080 --directory ~/.hermes/landing","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d9d45ee-8fe5-4dda-84d2-0719f8ecc97c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:38:45.783699040+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8080/2026-07-27.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e19a79f2-43f9-4042-9dc5-07e8fe697d51","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-27T06:38:46.845670151+00:00","session_id":"9b73d034-2a9a-4377-a11d-9cd75b112f38","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8080/index.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba51ffb7-4043-4216-bd2a-9d746e8fc904","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-28T06:31:17.661098029+00:00","session_id":"e16832d9-af9e-4c77-a63b-166344b969ae","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cee25f58-4824-49b3-8afc-166c43f9d44b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-28T06:33:29.435877817+00:00","session_id":"e16832d9-af9e-4c77-a63b-166344b969ae","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.9BprdAoO8[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a15c5ca-3d5d-4013-bef2-5231c61b4a7d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-28T06:33:46.142456682+00:00","session_id":"e16832d9-af9e-4c77-a63b-166344b969ae","action":"Allow","rule_ids":[],"command_redacted":"pgrep -f \"http\\.server.*landing\" || echo \"NOT_RUNNING\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90e9a5a5-8fea-45f2-a963-a70a69781050","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-28T06:35:40.782301697+00:00","session_id":"e16832d9-af9e-4c77-a63b-166344b969ae","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/enhance_trending.py /tmp/tmp.9BprdAoO8R/trendi[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b555db32-e647-4146-a194-ba05a0df3dff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-28T06:36:01.493875105+00:00","session_id":"e16832d9-af9e-4c77-a63b-166344b969ae","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i telegram 2>/dev/null; echo \"---\"; cat /home/ice/.hermes/config.yam[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59f97126-b479-4268-91c3-8718d4d63097","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-28T06:36:09.756392365+00:00","session_id":"e16832d9-af9e-4c77-a63b-166344b969ae","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8080/2026-07-28.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9507a92d-e3d4-460f-b4f5-1aeb6d3f4d9d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-29T06:31:27.566566735+00:00","session_id":"0c000daa-c777-4c81-b445-8d918fbe2cc3","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70d80108-c15c-4410-a496-dac6da8fed55","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-29T06:32:17.283673430+00:00","session_id":"0c000daa-c777-4c81-b445-8d918fbe2cc3","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.SOVOtwXtw[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1707b33-eab8-4f3a-ba4e-0ecc3ff41d25","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-29T06:33:18.550232800+00:00","session_id":"0c000daa-c777-4c81-b445-8d918fbe2cc3","action":"Allow","rule_ids":[],"command_redacted":"pgrep -f \"http\\.server.*landing\" || python3 -m http.server 8080 --directory ~/.h[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c4645fc2-5239-43fb-af9a-32b446268ef8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-29T09:27:43.040677694+00:00","session_id":"0c000daa-c777-4c81-b445-8d918fbe2cc3","action":"Warn","rule_ids":["schemeless_to_sink"],"command_redacted":"curl -s ifconfig.me && echo \"\" && hostname -I | awk '{print $1}'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"82731689-ad40-4f6c-b18a-806df65caee2","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["schemeless_to_sink"]}
{"timestamp":"2026-07-29T09:27:49.603995443+00:00","session_id":"0c000daa-c777-4c81-b445-8d918fbe2cc3","action":"Warn","rule_ids":["schemeless_to_sink"],"command_redacted":"curl -s -4 ifconfig.me 2>/dev/null || echo \"Sem IPv4 público\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"22f74509-6e8b-42b1-8a20-1873c5309582","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["schemeless_to_sink"]}
{"timestamp":"2026-07-30T06:30:59.609710875+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d3b79759-df1a-4865-be63-811561a65388","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T06:31:47.050409232+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.eBDDLpLDT[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba2cad8b-e28b-49e7-981b-8e75e93d44e4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T06:32:22.844480117+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"pgrep -f \"http\\.server.*landing\" || echo \"NO_SERVER\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0e3c799-d92f-407c-9f5b-3647d27fd075","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T06:41:12.959270933+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8080/2026-07-30.html | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"184aaee3-0cf8-4132-9878-f3a170228e30","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T06:41:19.294367466+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8080/2026-07-30.html && [...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dea5f320-a528-4d0d-a576-82508e360a67","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T06:41:22.504118844+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"ls -lh /home/ice/.hermes/landing/2026-07-30.html /home/ice/.hermes/landing/index[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"887fb706-d38a-4405-9562-442b168dd4ef","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T09:49:30.929464831+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ice && python3 -m http.server 8081 --bind 0.0.0.0","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fb668f87-4f04-428a-851f-95698f303b7d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T09:49:33.875416745+00:00","session_id":"bcdcd7cd-9c27-4e94-8e2c-fcec179dc2b6","action":"Allow","rule_ids":[],"command_redacted":"sleep 1 && curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8081/cruzeiro[...redacted 112 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44f0cb8d-c99a-4568-8896-e22f8a376db9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T10:38:18.024932915+00:00","session_id":"4ce495fe-14ee-436f-902e-1e2949d6c358","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\np=Path('/home/ice/cruzeiro-r[...redacted 457 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"39b4a565-8e97-4ad9-a51f-7f697b92b6b0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T10:43:26.100502257+00:00","session_id":"4ce495fe-14ee-436f-902e-1e2949d6c358","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\np=Path('/home/ice/cruzeiro-r[...redacted 483 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e418ac6a-540a-45b7-b071-97aaf3c85769","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-30T11:14:07.188050165+00:00","session_id":"4ce495fe-14ee-436f-902e-1e2949d6c358","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\ns=Path('/home/ice/cruzeiro-r[...redacted 413 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"12c2ffd1-0d0c-4b33-924d-e408480e4826","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T01:26:28.882024307+00:00","session_id":"abfef376-e408-4e10-9618-6452818c8809","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\np=Path('/home/ice/neon-corte[...redacted 397 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6257fd56-93db-4665-9a71-59f5d750a0ea","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T01:30:21.975803620+00:00","session_id":"abfef376-e408-4e10-9618-6452818c8809","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\np=Path('/home/ice/neon-corte[...redacted 360 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d58e45c-91a1-4221-a2ec-d4258005a90d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T01:30:43.596139068+00:00","session_id":"abfef376-e408-4e10-9618-6452818c8809","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\np=Path('/home/ice/neon-corte[...redacted 310 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47c27d2f-2ef1-42ae-8286-a53c7cd36efa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T01:34:00.211785366+00:00","session_id":"abfef376-e408-4e10-9618-6452818c8809","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\np=Path('/home/ice/synapse-he[...redacted 320 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a83afbc1-3c3c-4354-bafa-606fec840e71","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T06:32:55.495264700+00:00","session_id":"8bffdca1-2586-4417-aaf7-2db624f81b8a","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ice/.hermes/scripts/ 2>/dev/null && ls -la /home/ice/.hermes/landin[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"73b61895-e20a-4b65-90fd-80324c1f86de","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T06:33:38.690747407+00:00","session_id":"8bffdca1-2586-4417-aaf7-2db624f81b8a","action":"Allow","rule_ids":[],"command_redacted":"bash /home/ice/.hermes/scripts/github_trending_collect.sh 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff247415-dd72-4b20-b1df-797af49f0cb7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T06:34:14.500740696+00:00","session_id":"8bffdca1-2586-4417-aaf7-2db624f81b8a","action":"Allow","rule_ids":[],"command_redacted":"python3 /home/ice/.hermes/scripts/github_trending_generate.py /tmp/tmp.Odqh1uUxQ[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f1bf28b-ce2c-44a8-bbee-a8d5869d3c60","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T06:34:15.597118241+00:00","session_id":"8bffdca1-2586-4417-aaf7-2db624f81b8a","action":"Allow","rule_ids":[],"command_redacted":"pgrep -f \"http.server.*landing\" > /dev/null 2>&1 && echo \"SERVER_RUNNING\" || ech[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca1aa9fb-e781-40a6-a8f3-33d27f069bf8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T06:35:07.784100087+00:00","session_id":"8bffdca1-2586-4417-aaf7-2db624f81b8a","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/extract_readmes.py && echo \"---\" && wc -c /tmp/readmes/*.txt","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec85ca27-afd8-4f5f-b487-949f5d36879c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T06:36:05.146760278+00:00","session_id":"8bffdca1-2586-4417-aaf7-2db624f81b8a","action":"Allow","rule_ids":[],"command_redacted":"hostname -I | awk '{print $1}' && head -c 2500 /home/ice/.hermes/landing/2026-07[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2eba7c96-a454-4205-a16e-d7375f78a3b9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-07-31T06:37:06.719775279+00:00","session_id":"8bffdca1-2586-4417-aaf7-2db624f81b8a","action":"Allow","rule_ids":[],"command_redacted":"grep -c \"2026-07-31\" /home/ice/.hermes/landing/index.html; curl -s -o /dev/null [...redacted 142 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0566b9e4-e8dc-4dc4-b9fe-c85b7fca0c4c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}