Page two of five: questions asked before acting, refusals, and outside material treated as data. Page one has the runs and the delivery format.
Approvals and refusals
| Type | Reported by | When | Detail carries |
|---|---|---|---|
approval.answered | Mac and server | A person answered before the seat acted. | id, decision, remembered, from |
approval.withdrawn | Mac | A seat stopped waiting before anyone answered. | id, kind |
approval.quiet | Mac | Allowed in Auto without a card, under a Settings switch. | kind, switch |
approval.form | Mac | Allowed by the person on a form that showed the limits (Run in the Cloud's Start), after the hook and the rules. | kind, form |
policy.bound | Mac | A run started under a profile bound to its project or to automations. | profile, automation |
policy.refused | Mac | A tool rule or a sequence policy refused a call. | tool, reason, command |
sandbox.refused | Mac | The kernel sandbox refused a command's reach outside the workspace. | command, paths |
egress.refused | Mac | A connection to a host not on the allowlist was refused. | command, hosts |
sandbox.outside | Mac | A seat ran one command outside the kernel sandbox, after the person approved it. | command, speaker, role, reason |
allow.removed | Mac | A remembered allow rule was withdrawn. | rule, dir |
ask_person.asked | Mac | A seat put questions to the person. | count |
ask_person.answered | Mac | The person answered them, or skipped. | answered |
ask_person.remote_answer | Mac | Questions answered or skipped from the phone or the web. | skipped |
ask_person.withdrawn | Mac | Questions withdrawn unanswered: the run ended, or the seat stopped waiting. | why |
instructions.allowed | Mac | The person allowed a folder's instruction files for a run. | files, dir |
instructions.ignored | Mac | The person declined a folder's instruction files for a run. | files, dir |
instructions.skipped | Mac | Nobody could allow a folder's instruction files; they went unread. | files, why |
outside.instructions | Mac | Material from outside the discussion carried instructions, which were treated as data. | source |
secrets.masked | Mac | Credentials in a run's turns or tool results were masked before leaving. | count, kinds |
mcp.changed | Mac | An MCP server's tools differ from what was approved; withheld until approved again. | server, added, removed, changed |
mcp.approved | Mac | The person allowed a changed MCP server's new definitions. | server |
mcp.refused | Mac | The person declined a changed MCP server; it stays connected and silent. | server |
mcp.signin | Mac | The person signed in to an MCP server by URL; the sign-in is kept sealed on this Mac. | server |
mcp.signout | Mac | The person signed out of an MCP server by URL; its sign-in was forgotten. | server |
mcp.registry | Mac | The team's MCP registry file changed since last fetched. | url, added, removed |
judge.sentence | Mac | The Smart-mode judge asked because a team or member sentence applied. | sentence, tool |
production.touched | Mac | A call touched a production marker: asked, or refused. | marker, tool, action |
cli.account_refused | Mac | A CLI seat's sign-in was off the team's domain; it did not run. | cli, domain |
exposure.asked | Mac | A command would open a way in from the internet: asked or refused. | kind, action |
memory.rejected | Mac | A memory the room had extracted was forgotten before anyone accepted it. | scope |
retention.swept | Mac and server | The team's retention period deleted closed discussions past it. | count, days |
guardrail.violation | Mac and server | A person's ask tripped a team guardrail; logged, warned or refused by level. | kind, level, why |
secret.used | Mac | A run's commands got the team's or the member's secrets, by name. | names |
settings.changed | Mac | A guardrail setting changed here: policies, rules, hooks, MCP servers, remembered allows, folder trust, mode. | keys |
approval.remote_refused | Mac | An answer from another device was refused; this Mac answers its own. | id, decision |
Who reports them
Reported by Mac means the member's app observed it and reported it; a Mac with admin access could suppress it. Server means our servers observed it themselves. Every refusal on this page carries the reason in words, never the content that was refused: a command's text, yes; a file's contents or a page's words, never.