{"timestamp":"2026-05-07T10:16:37.333695662+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"whoami && echo '---' && pwd && echo '---' && uname -a && echo '---' && echo $HER[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a318dc5-0316-4d4d-ac42-83397a72c4ae","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:37.603446664+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"hermes status --all 2>&1 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"244d15dc-f298-4ceb-a1aa-71cd94049305","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:37.884784722+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"hermes config 2>&1 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2be7c4af-564a-4a45-969c-b145ddfa76b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:38.174336980+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"hermes tools list 2>&1 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8557dc44-94a8-4f7f-ae32-80b4595497f9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:38.461869887+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"hermes skills list 2>&1 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"83abb154-c20e-4b1b-8d7d-ce33c00dc372","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:38.740526927+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"hermes memory status 2>&1 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4673a24-77a2-4d8f-9dd9-ef5169911ccd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:39.019001757+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"hermes doctor 2>&1 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"063788ed-c7c7-4ec6-a584-160f4c9515c4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:51.103023535+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"38200456-b627-400c-97b7-fb598cd3d1ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:51.363761230+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.local/bin/hermes 2>/dev/null || echo 'nicht da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79015ae8-aabb-45af-8c68-8d85fc040e39","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:51.624734592+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /usr/local/bin/hermes 2>/dev/null || echo 'nicht da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"128bba0b-58a8-4e29-a274-3fba01a15c72","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:51.890068152+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /usr/bin/hermes 2>/dev/null || echo 'nicht da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"89e01be6-3fd1-4c37-8107-6e844f665b17","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:52.189676947+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/hermes-agent/hermes 2>/dev/null || echo 'nicht da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"78b4493e-cd0d-44f5-be92-170ac68fc696","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:52.493133985+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/venv/bin/hermes 2>/dev/null || echo 'nicht da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fe345f8-71e7-4ad0-b628-2484d05665ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:52.776928290+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /opt/hermes/bin/hermes 2>/dev/null || echo 'nicht da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d666bd03-8003-4257-884a-157d97262e12","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:53.066286882+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -i hermes | grep -v grep || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9e99aac2-2a41-400d-a377-c0b09d317a9a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:53.356611510+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"docker ps --format '{{.Names}} {{.Image}} {{.Status}}' 2>/dev/null | grep -i her[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"089a8271-0162-487d-a44b-3626a1863d89","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:53.655408681+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"systemctl --user list-units --type=service --state=running 2>/dev/null | grep -i[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b07cbf7-691f-4148-9967-9810c32aea42","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:53.943279178+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"systemctl list-units --type=service --state=running 2>/dev/null | grep -i hermes[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a63d0c40-3567-427f-b673-d8633f6fe8c2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:54.236452147+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -maxdepth 2 -name 'config.yaml' 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e66e06c0-906c-4b0b-adbd-3e1b37822797","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:16:54.534489106+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -maxdepth 2 -name '.env' 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba635caf-29e6-4287-86a7-eabcce07b1e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:17:09.890954943+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -i 'hermes gateway' | grep -v grep","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"525e3478-a9cd-476b-90c4-99eb9bba2050","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:17:10.191671606+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/logs/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8fef3e20-3569-4cee-a343-f2781c68127b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:17:10.491570033+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -t /DATA/AppData/hermes/logs/*.log 2>/dev/null | head -1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"004fc244-423d-4861-8345-4276559206cd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:17:10.785882128+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"tail -50 '/DATA/AppData/hermes/logs/agent.log'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"86887905-b31b-4ef6-9ce2-d45811c3db5a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:17:11.085982246+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/skills/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"268ea1b1-6255-4335-8831-b96da631f074","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:17:11.375688866+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"file /DATA/AppData/hermes/state.db","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f13a5ba9-b6f1-4c24-8e3c-284904ecedad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:17:11.669573926+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"sqlite3 /DATA/AppData/hermes/kanban.db '.tables' 2>/dev/null || echo 'kein sqlit[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"27025258-19f0-48ba-ae8d-d741bba96ec1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:12.290535635+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -iE 'openclaw|claw' | grep -v grep || echo 'Keine offenen Claw-Pro[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"13995376-cfb8-4ea5-8696-8d9b862f7b53","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:12.579496350+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/openclaw 2>/dev/null || echo 'nicht da: /DATA/AppData/openc[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e2d9883-0ce0-43d7-b261-56111a4ea322","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:12.865117048+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.openclaw 2>/dev/null || echo 'nicht da: ~/.openclaw'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1c16c5ed-1d5a-41ae-82c3-84095d8c6b1b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:13.146944086+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.config/openclaw 2>/dev/null || echo 'nicht da: ~/.config/openclaw'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e7993b35-b5d6-4753-a2fe-c9951efb25f6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:13.454235742+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /opt/openclaw 2>/dev/null || echo 'nicht da: /opt/openclaw'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a8b21b1-467e-4350-b072-ac25416ac96f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:13.755040838+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /usr/local/bin/openclaw 2>/dev/null || echo 'nicht da: /usr/local/bin/ope[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98d3c83a-8318-4edf-90b0-7924632b1e3d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:14.049433130+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.local/bin/openclaw 2>/dev/null || echo 'nicht da: ~/.local/bin/opencla[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1db60e4-cc0a-45d2-90fb-f702898177e6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:14.327565183+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"systemctl --user list-unit-files | grep -i claw || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b39de3bd-eebd-4bc3-a770-fa667f21c7d5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:14.628410742+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"systemctl list-unit-files | grep -i claw || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ded42f61-f20a-4150-9459-6696bd96b25f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:15.353931497+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep -iE 'claw|hermes|python' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f365d0c6-7ed9-4e4a-9713-79ac1c4be8b1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:15.633301740+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which openclaw 2>/dev/null || echo 'nicht im PATH'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1daf9867-dc09-4f3a-bbf3-d80ce9684ffa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:15.918355665+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/ | grep -i claw || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0c795b9-606d-427f-863e-c83a27648fa5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:16.225409431+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -i telegram /DATA/AppData/hermes/.env || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e37d9baf-fac2-422a-a432-e712a5b9647c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:16.525091181+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -i telegram /DATA/AppData/openclaw/.env 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"223f7ab6-751e-4519-91ff-3d7011173fbc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:16.809091914+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -i telegram ~/.openclaw/.env 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca4de137-3bc9-4aeb-bf8f-c7379d149913","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:17.102687878+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -i telegram ~/.config/openclaw/.env 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"617d21c6-a9e0-425e-854d-12fbcf45fb43","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:34.287697633+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep 'openclaw-gateway' | grep -v grep","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df06c6ff-404d-4096-ad81-778baa7a2d06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:34.553202053+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /proc/4030129/exe 2>/dev/null || echo 'Kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64936bdd-9742-469a-bf98-61cf6dfcdc98","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:34.815100293+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /proc/4030129/cwd 2>/dev/null || echo 'Kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f471c62f-c5e8-486f-8f6c-5041bf50c371","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:35.101656463+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cat /proc/4030129/environ 2>/dev/null | tr '\\0' '\\n' | grep -iE 'telegram|token|[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c9604cd8-583c-4779-8b7c-607f96ea6b78","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:35.381278410+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"systemctl status openclaw-gateway 2>/dev/null | head -20 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e879229-653d-4874-aabd-8ee8b2012d41","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:35.659256534+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep 4030129 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7f073dc3-52f3-47f6-b167-e4b426c1fe72","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:29:35.946007145+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find / -name 'openclaw*' -type f 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba2395f0-e0c7-4338-9584-de7e97790ae0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:03.257049591+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/openclaw-backup.json 2>/dev/null || echo 'nicht da: /DATA/openclaw-[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d43f0e15-dcbe-44bd-ba2d-e986a1e231b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:03.541796576+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp/openclaw.json 2>/dev/null || echo 'nicht da: /tmp/openclaw.json'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2eee062-a3a3-4a83-980e-99332514431f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:03.846433398+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /var/lib/casaos_data/openclaw-backup.json 2>/dev/null || echo 'nicht da: [...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"34d89616-8ee0-4d5c-b878-3d6203cb2018","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:04.129601053+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/openclaw 2>/dev/null || echo 'nicht da: /DATA/AppData/openc[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e1d2ca5-0ada-4355-97c4-d9795426877d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:04.423030362+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.openclaw 2>/dev/null || echo 'nicht da: ~/.openclaw'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00901fc7-41c9-461a-8449-e7c70f61451f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:04.723306195+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /root/.openclaw 2>/dev/null || echo 'nicht da: /root/.openclaw'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2765932e-ccab-4a99-b837-5fdcefd3d227","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:05.015033260+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /opt/openclaw 2>/dev/null || echo 'nicht da: /opt/openclaw'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1ebdce8-4d19-4f37-951e-cf8253271054","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:05.305942197+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /var/lib/openclaw 2>/dev/null || echo 'nicht da: /var/lib/openclaw'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"580389f4-529d-4dfa-bbeb-9084dfef2ed0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:06.912320660+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find / -name 'config.yaml' -path '*openclaw*' 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea9a910d-0ab8-45df-8170-8e126882eb41","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:09.411388087+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find / -path '*openclaw*' -name '*.log' 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b72d4d79-58e4-4bff-8526-b36d09dc3dec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:11.894187317+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"getent passwd root || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bc00e37e-f05f-4db0-be22-a7cc5cc59f14","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:12.184154490+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"kill -0 4030129 2>&1 && echo 'Prozess existiert und ich kann signale senden' || [...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a53774c9-85e9-420d-8b90-5a9f7c5bc248","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:27.154495698+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cat /DATA/openclaw-backup.json 2>/dev/null | head -100 || echo 'KEIN ZUGRIFF auf[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03dda47f-26ab-4ea6-8d88-0bbc5d6a6f4c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:27.439442761+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cat /var/lib/casaos_data/openclaw-backup.json 2>/dev/null | head -100 || echo 'K[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"177f3b63-1de9-4487-81d8-c995a6849ba1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:27.739228471+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/openclaw.json 2>/dev/null | head -100 || echo 'KEIN ZUGRIFF auf /tmp/op[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fb4a4e5b-968b-47a0-8c3e-579404f21d75","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:28.026193377+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /root -maxdepth 3 -name '.openclaw' -o -name 'openclaw' 2>/dev/null | head [...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f7c3f12d-f561-4346-80cd-1f4b2fa8bc4c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:28.310358154+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find / -maxdepth 4 -type d -name 'openclaw' 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1239315d-63bc-44bf-9fe3-1105d66a99ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:28.572715058+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"docker ps -a 2>/dev/null | grep -i claw || echo 'Docker nicht erreichbar oder ke[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79434f3d-e0cf-4987-981e-64fa9c875db6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:28.906785346+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp 2>/dev/null | grep -E '4030129|python' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f5d9018-4955-4180-bfbd-1ff5cce58698","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:29.184475591+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"sudo ls -la /proc/4030129/cwd 2>/dev/null || ls -la /proc/4030129/cwd 2>/dev/nul[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d8e0ed7-3bf9-47a9-ac29-d3460292583d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:29.490336406+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cat /proc/4030129/cmdline 2>/dev/null | tr '\\0' ' ' || echo 'Kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4046d8b-7975-4de0-8001-a2145eecd38f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:29.783192019+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"sudo ls -la /proc/4030129/fd/ 2>/dev/null | head -30 || echo 'Kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6603b5f4-6aae-4e3a-95c3-40d944395605","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:47.476164121+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/.casaos/apps/openclaw/ 2>/dev/null || echo 'Kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a6ebf5a-d88a-4156-945e-9f4d00a490ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:47.757320384+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/openclaw/ 2>/dev/null || echo 'Kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f7dbae1e-cd79-4679-9271-ba915ce045a9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:48.049672950+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/.casaos/apps/openclaw -maxdepth 3 -name 'config*' -o -name '*.yaml' -[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00283066-5950-4e4e-b68c-5e372f5d5bbe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:48.341611836+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/openclaw -maxdepth 3 -name 'config*' -o -name '*.yaml' -o -na[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"656f62cc-221f-43c1-98e3-412c13de117a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:48.617148077+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/.casaos/apps/openclaw -maxdepth 3 -name '*.log' 2>/dev/null | head -1[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a2ce4f3-e957-4dba-8170-c95393471ffc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:48.901246439+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/openclaw -maxdepth 3 -name '*.log' 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2e42a9d-ba23-444e-a85d-4e112996545c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:49.186822879+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/.casaos/apps/openclaw -maxdepth 3 \\( -name '*.db' -o -name '*.sqlite'[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"12e3c2fa-1309-4f55-8dad-0746b05eb59e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:49.464000370+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/openclaw -maxdepth 3 \\( -name '*.db' -o -name '*.sqlite' -o -[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0371cf32-eedf-4800-88bf-9b7e601b7462","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:49.743335750+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"file /DATA/.casaos/apps/openclaw/openclaw-gateway 2>/dev/null || file /DATA/AppD[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"57257bb9-4de0-431f-93ae-68e730d16f07","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:31:50.035245464+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/.casaos/apps/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"015aabc6-5e95-4cb1-886d-f20fbbb9422a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:40:50.411042343+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -i chromium | grep -v grep || echo 'Kein Chromium aktiv'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"37713d3d-3ed1-4077-b907-fed672baa151","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:40:50.704912734+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep 18800 || echo 'Port nicht belegt'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52ce0cd1-8d37-44e2-9edc-26a8561638c0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:56.605537810+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/user/HDD_1TB/' 2>/dev/null && echo '✅' || echo '❌'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01404285-6055-4bde-85a7-09f7e2048191","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:56.885143733+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/user/HDD_1TB/Medien/' 2>/dev/null && echo '✅' || echo '❌'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b58187d9-fc60-4e76-88b1-2589698b1120","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:57.191268084+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/user/HDD_1TB/Medien/Serien/' 2>/dev/null && echo '✅' || echo '❌'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbc4af58-59e0-4c11-9a95-f9c22eeee670","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:57.482815648+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/user/HDD_1TB/Medien/Filme/' 2>/dev/null && echo '✅' || echo '❌'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ac118906-4fa1-49eb-ab89-4cbbffca6133","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:57.762651952+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/user/HDD_1TB/Medien/Buecher/' 2>/dev/null && echo '✅' || echo '❌[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1142c3f4-bc83-4fff-8148-a44801a26d48","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:58.035691935+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/user/HDD_1TB/SetupOS/' 2>/dev/null && echo '✅' || echo '❌'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e437a9eb-9dfe-4f93-abca-43f55b60b033","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:58.319724746+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/user/HDD_1TB/Dokumente/' 2>/dev/null && echo '✅' || echo '❌'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8aeb3614-be2b-4609-94ee-5d65e06c55d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:58.612567829+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -d '/mnt/ssd/.media/HDD_1TB/Medien/' 2>/dev/null && echo '✅' || echo '❌'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0c30a0cf-7fe8-430b-a605-c9dcf8380c36","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:58.896335679+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/.casaos/apps/ 2>/dev/null | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e0f1e9a-da9c-4354-bebf-31be8aca5b7a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:59.187520480+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/.secrets/ 2>/dev/null || ls -la ~/.secrets/ 2>/dev/null || [...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03361b4b-30d4-4786-91a0-2749451b449e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:59.479472100+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -maxdepth 2 -name 'SOUL.md' 2>/dev/null | head -1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7681cfd8-99bb-4990-9891-42a2abcc534c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:41:59.764874282+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -maxdepth 2 -name 'USER.md' 2>/dev/null | head -1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e901d264-d5c6-422f-96b1-af71194ee1e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:42:00.069938570+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -maxdepth 2 -name 'MEMORY.md' 2>/dev/null | head -1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e8f857f-3695-421c-a8b7-9ab3158f19a1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:09.180711502+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/.secrets/notion.env 2>/dev/null || echo 'nicht da: /DATA/Ap[...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b7af083-a0b1-4ba7-8dd1-f60b260249eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:09.473752490+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.secrets/notion.env 2>/dev/null || echo 'nicht da: ~/.secrets/notion.en[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d74ceb90-366f-4a0e-96c1-b0e95302e9e2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:09.758343853+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/.secrets/notion.env 2>/dev/null || echo 'nicht da: /[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"095dde1d-ed56-47a3-a681-dd17ce0d972b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:10.062712253+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /root/.secrets/notion.env 2>/dev/null || echo 'nicht da: /root/.secrets/n[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2890349-ad0d-4a3e-a08f-2ef748dffd6d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:10.367998937+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i notion || echo 'Keine Notion env vars im aktuellen Prozess'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"292ec303-2f62-40c4-a358-1752a76cad1a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:24.965567633+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /DATA -name '*.env' 2>/dev/null | xargs grep -l -i 'notion' 2>/dev/null || [...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d89d776e-928c-4d8e-974b-e7837be45713","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:25.444927040+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /root -name '*.env' 2>/dev/null | xargs grep -l -i 'notion' 2>/dev/null || [...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec6b124c-60b0-457f-9453-5090cb5a99a6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:25.746147113+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /tmp -name '*.env' 2>/dev/null | xargs grep -l -i 'notion' 2>/dev/null || t[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"acf1775e-4110-4b73-945a-7aca62415bab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:26.051074184+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find /var -name '*.env' 2>/dev/null | xargs grep -l -i 'notion' 2>/dev/null || t[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2ce1a895-df77-40ee-8808-97911784512a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:26.525947190+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -r 'notion' /DATA/AppData/hermes/.env 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c31ae91d-8186-430e-845b-9f766ce21039","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:26.806222541+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -r 'notion' /DATA/AppData/hermes/config.yaml 2>/dev/null || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b499c7a1-8385-405f-8204-ec585009484a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:27.095242119+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"find / -type d -name '.secrets' 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26c5f976-20c4-4198-8cc7-44268724d578","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:29.571294930+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -r 'ntn_' /DATA/AppData 2>/dev/null | head -5 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4706c5db-6903-4e91-b257-222a7b758d21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:45:42.069183332+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -r 'ntn_' /root 2>/dev/null | head -5 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4f694b01-d3ec-44dc-a509-a68667510f9a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:47:40.849959034+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"chmod 600 /DATA/AppData/hermes/.env && ls -la /DATA/AppData/hermes/.env","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"61880bc5-193e-462f-87dd-d671c1eb052f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:53:29.656812292+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/skills/productivity/notion/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"08c488a4-81c1-4e2c-9ccf-6c147dcb0686","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:53:42.895702928+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"chmod 600 /DATA/AppData/hermes/.env && ls -la /DATA/AppData/hermes/.env","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8ae1a0eb-fde4-4857-9b5e-4a85dbe3c9e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:53:43.171474504+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"systemctl --user status hermes-gateway 2>/dev/null | head -5 || systemctl status[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14142939-5a5f-47c5-a9be-510e1f0b56f6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:53:43.465965836+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -r 'notion' /DATA/AppData/hermes/skills/productivity/notion/SKILL.md | head[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aa132f13-9773-49e7-9bda-70b44c05837b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:57:18.405841071+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which himalaya 2>/dev/null || echo 'NICHT INSTALLIERT'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fcb3a497-a94b-493b-a6a0-9de01ac84709","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:57:18.698615441+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"python3 -c 'import imaplib, smtplib; print(\"IMAP/SMTP Module verfuegbar\")' 2>/de[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ebd61ba1-5046-4488-bbf7-f143b99f7d7b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:57:25.760150144+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/.secrets && chmod 700 /DATA/AppData/.secrets && ls -la /D[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3362387-c4fb-488a-993b-9c5d34258385","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:57:26.736858736+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"chmod 600 /DATA/AppData/.secrets/gmx_email.env && ls -la /DATA/AppData/.secrets/[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef134c2e-fb5d-4b7a-9e62-4632e8208f0f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T10:57:27.046103392+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"grep -i gmx /DATA/AppData/hermes/.env || echo 'Nicht in Hermes .env'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d0d913a2-8872-4d50-8d12-3e5dcb332e84","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:05:59.272690961+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which himalaya 2>/dev/null || echo 'NICHT_DA'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30d3fc6b-0b2b-449d-a1fb-36613003238b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:05:59.643347790+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"export PREFIX=\"$HOME/.local\" && curl -sSL https://raw.githubusercontent.com/pima[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"acc49329-6f73-4279-9500-0eb5d1488f08","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-07T11:06:43.417405581+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"echo $PATH | grep '.local/bin' && echo 'PATH_OK' || echo 'PATH_FEHLEND'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"56f8690e-20b5-4817-ac31-adbd6b9c0abb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:06:43.745281479+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Block","rule_ids":["dotfile_overwrite"],"command_redacted":"echo 'export PATH=\"$HOME/.local/bin:$PATH\"' >> ~/.bashrc && export PATH=\"$HOME/.[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1384648b-c000-4a15-9eff-52a3f6948990","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["dotfile_overwrite"]}
{"timestamp":"2026-05-07T11:06:45.845459570+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"$HOME/.local/bin:$PATH\" && himalaya --version 2>&1 || ~/.local/bin/[...redacted 61 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c9e1e7b-a4ec-480a-8019-038a1047df01","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:07.035747060+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"echo $HOME && echo '---' && id && echo '---' && ls -la /DATA/ | grep -E 'az-a|Ap[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c78a9cae-3cf7-4f56-9f74-fcad7eaf633a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:07.318810976+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/hermes/bin && ls -la /DATA/AppData/hermes/bin","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f0cd75c-bb99-4f2d-bfea-7cf6490cd49e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:07.668181590+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && curl -sL https://api.github.com/repos/pimalaya/himalaya/releases/late[...redacted 76 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fd4e0a39-1eaf-42f8-88f5-51cb7f272ceb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:32.485120707+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && \\\ncurl -sL -o himalaya_test.tar.gz --max-time 20 'https://github.com/[...redacted 137 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7ce6c6f5-4d2e-4e23-854e-1d803f851892","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:33.222623754+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && \\\ncurl -sL -o himalaya_test.tar.gz --max-time 20 'https://github.com/[...redacted 137 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f44f316-82eb-4661-a1de-23ad576e64b3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:33.741106824+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && \\\ncurl -sL -o himalaya_test.tar.gz --max-time 20 'https://github.com/[...redacted 137 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8449da7b-f8ca-4d10-aa9c-6bd150db0331","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:34.409348904+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/bin/himalaya 2>/dev/null && /DATA/AppData/hermes/bin[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"710fb8ce-d819-46fc-b9cf-78289b5918da","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:48.847955857+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which cargo 2>/dev/null && cargo --version || echo 'CARGO_NICHT_DA'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49c69332-a03b-456f-96b4-fca9ee7b73e5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:49.127069816+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"pip3 list 2>/dev/null | grep -i mail || echo 'NIX'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3e68798f-34d7-4a60-8b69-babc6f3ff496","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:49.435714876+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which alpine 2>/dev/null && echo '✅ alpine' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0f1d37cc-a7de-4a48-8942-988982e4d370","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:49.729065070+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which mutt 2>/dev/null && echo '✅ mutt' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b9ed925-649d-44c4-b4a1-35e3b4672ad1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:50.031913489+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which neomutt 2>/dev/null && echo '✅ neomutt' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"649f29f6-d566-440c-8865-88667746ea81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:50.319691545+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which mail 2>/dev/null && echo '✅ mail' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2dfaf10-fb7d-469f-96be-a73d3b13b785","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:50.614607874+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which mailx 2>/dev/null && echo '✅ mailx' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35b90b31-edcc-4988-8db6-9a1aa3841a2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:50.904581633+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which mu 2>/dev/null && echo '✅ mu' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3392b417-ca7b-4f34-a35a-99a2f3d9f067","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:51.170384914+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which offlineimap 2>/dev/null && echo '✅ offlineimap' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f8af555a-5fe3-435a-b02b-de13a7fd1fcd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:51.469677418+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which isync 2>/dev/null && echo '✅ isync' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9138ba8f-c3d3-4675-8017-16da41e90ffd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:51.780669063+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which mbsync 2>/dev/null && echo '✅ mbsync' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7aade1d2-feda-4cba-a0de-df8bef2c347f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:07:52.135005379+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -sL 'https://api.github.com/repos/pimalaya/himalaya/releases/latest' | pyth[...redacted 136 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5ada9e9c-9e45-4700-a4bc-d07cbe16a354","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-07T11:08:03.477274448+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Warn","rule_ids":["npm_url_install"],"command_redacted":"cd /tmp && curl -sL -o himalaya.tgz 'https://github.com/pimalaya/himalaya/releas[...redacted 245 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b04ff3d7-3623-457d-94b1-09976fdc206d","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["npm_url_install"]}
{"timestamp":"2026-05-07T11:11:53.108526713+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/bin/himalaya --version 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01d448ce-a0d5-4595-9ea0-2b193cac72c2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:12:14.063926798+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/.config/himalaya","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d12c9bd-cec8-4f98-9ac3-a07dcdf6435a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:12:15.904698598+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"chmod 600 /DATA/AppData/.config/himalaya/config.toml && ls -la /DATA/AppData/.co[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b4974c31-0d2d-4c75-a61b-7fbcc47e3aa3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:12:16.209450440+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"export PATH='/DATA/AppData/hermes/bin:$PATH' && export HIMALAYA_CONFIG='/DATA/Ap[...redacted 89 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e7df03fc-b5c5-4a8d-b944-a5b59b9bfb12","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:12:29.978632362+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/.secrets/gmx_email.env 2>/dev/null || echo 'FEHLT'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c66fb11-e942-49db-887f-e98e73620c1d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:12:30.330351187+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/.config/himalaya && cat > /DATA/AppData/.config/himalaya/[...redacted 1031 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8564419d-81da-43f6-b88a-3e9e908eb29d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:39:47.625304102+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools list 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"713ca302-96e4-4f71-b844-af7221334121","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:39:48.702198385+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools enable terminal 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b242705-73b6-4cc1-bc71-99f301670e97","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:39:50.024039404+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools enable file 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ceec78d-d7c2-4053-a4fa-16e11d12e3d6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:39:51.337958608+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools enable web 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"82687f21-9cb3-43aa-9950-c7cef6545c1d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:39:52.678121226+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools enable code_execution 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7160ea76-92f7-433b-8af4-b2778bcb7a88","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:39:53.972443641+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools list 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f1d0a4a-dfbb-4bdb-97b2-93a5add662c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:47:59.557218180+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/.secrets/ 2>/dev/null || echo 'leer'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b66c87c3-6f6c-47dc-8fc7-7cfbbbc23c90","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:47:59.865285569+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes config 2>&1 | grep -i -A5 'image' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b38b10cc-77d2-437a-be05-68ffba601d7a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:48:00.749926646+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which comfyui 2>/dev/null && echo '✅ comfyui' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"60a66487-6892-4127-b74a-75d55ae318b1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:48:01.035989797+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which  Automatic1111 2>/dev/null && echo '✅  Automatic1111' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"173b192e-9d5a-46e9-b338-778feb21cd53","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T11:48:01.318297794+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which stable-diffusion-webui 2>/dev/null && echo '✅ stable-diffusion-webui' ||[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2d1cfe71-1fd4-4d81-ac7e-4441187712e8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:02:22.420884829+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/skills/social-media/ 2>/dev/null | grep -i -E 'xurl|twit[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4eeab3ae-37bd-4e64-a447-3b0133b79178","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:02:22.712962875+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/skills/social-media/xurl/ 2>/dev/null || echo 'nicht ins[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7ca4da92-ab86-4038-97ee-4d6f183960b0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:02:23.011078987+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which xurl 2>/dev/null || echo 'nicht installiert'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ee9125b-966c-4298-bb1e-cfaf723aff86","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:02:23.309657156+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools list 2>&1 | grep -i -E 'twitter|xurl|[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a497af68-b696-45c6-81c1-806ba3ab5633","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:02:24.593247032+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/.secrets/ | grep -i -E 'twitter|x_' || echo 'keine twitter secr[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef408480-e344-4c7a-8120-17ea815ecd2e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:04:59.543005629+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which rss-bridge 2>/dev/null || which snscrape 2>/dev/null || echo 'nicht instal[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25aa66bd-2f57-4a36-9ddd-64196ea24f66","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:20.706587161+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which yt-dlp 2>/dev/null && echo '✅ yt-dlp' || echo '❌ yt-dlp'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e2d32a4c-9c46-47c4-b23c-7882a5c5f246","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:21.021468652+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which youtube-dl 2>/dev/null && echo '✅ youtube-dl' || echo '❌ youtube-dl'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"590d322b-cfe2-4aff-9758-a33ec2d3408b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:21.338044550+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"python3 -c 'import ytmusicapi; print(\"✅ ytmusicapi\")' 2>/dev/null || echo '❌[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa905a9b-0993-4bf0-beb9-b7f834c173cd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:21.656093321+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which ffmpeg 2>/dev/null && echo '✅ ffmpeg' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"39db18da-b304-4b89-9466-c5447dc94caf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:21.984182166+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which spotdl 2>/dev/null && echo '✅ spotdl' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"75041739-0d5c-4da9-9fef-839cf15738d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:22.287460955+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which tidal-dl 2>/dev/null && echo '✅ tidal-dl' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b06cb34-f804-4a18-8bfa-55ed23ead646","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:22.570910381+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which deemix 2>/dev/null && echo '✅ deemix' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3a3b607-fe87-4cc3-97f5-d1ccec5f0296","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:22.893384793+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"which mopidy 2>/dev/null && echo '✅ mopidy' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ce74a00-ac58-4f17-85c9-fa012afc8842","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:23.217942309+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/skills/ 2>/dev/null | grep -i -E 'youtube|music|audio|vi[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8ef5f8e5-a52e-43de-b8d2-65c3f0c6344b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:23.525183343+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/.secrets/ 2>/dev/null | grep -iE 'youtube|music' || echo 'keine[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8929d645-76bc-4eab-b39f-0767f9d01166","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:23.829462780+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"pip3 list 2>/dev/null | grep -i -E 'yt|tube|music|audio|down' || echo 'nix relev[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d50af12b-dc40-4ac5-bed7-d4ad43a8900f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:20:24.164280470+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install --dry-run yt-dlp 2>&1 | head -5 || echo 'pip nicht verfue[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"de7065d4-fb03-46e3-8075-96847bf0db87","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:22:18.707379146+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -o /DATA/AppData/hermes/bin/yt-dlp 'https://github.com/yt-dlp/yt-dlp/re[...redacted 116 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3397092c-adb7-465e-a2ba-77ba896bbae9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:22:19.210920075+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/bin/yt-dlp --version 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d7fa5217-122e-4f67-a95c-82c9f27bc689","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T12:22:20.319296122+00:00","session_id":"1ff0f7ed-de57-421f-9da2-bb70c7ac580f","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/bin/yt-dlp --ffmpeg-location $(which ffmpeg) 2>&1 | head -1[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2ab72cef-0cd8-4a16-8477-b0d32cba1301","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:49:43.659015901+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo systemctl status hermes-gateway --no-pager | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe5cbc49-b320-436d-b0d1-9295678f080c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:49:43.965841871+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo systemctl restart hermes-gateway","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f9857f51-05d0-4ccd-8637-6180dfbb9bfb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:02.774636384+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"docker ps --format 'table {{.Names}}\t{{.Ports}}\t{{.Status}}' | grep -i docmaster[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a715910-e0e1-4e96-8b00-adc4ac2c2ec6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:03.082871051+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/.casaos/apps/ 2>/dev/null | grep -i docmaster || echo 'nix in CasaOS ap[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d1880f7-9a23-41c6-b1a4-bdd14a0dd20f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:03.369651514+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep -E ':80|:443|:3000|:8080|:5000|:5173|:4173' | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f0414fe0-5e94-4b0f-852d-cb46b80a0901","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:03.667990484+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"docker inspect $(docker ps -q --filter 'name=docmaster') 2>/dev/null | grep -i -[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0eb8b40e-9dbc-493b-b3a6-8cf26db58026","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:04.037233577+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:3000/ 2>/dev/null || ech[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f54d2843-93ac-4d2c-9eb6-c036db8bb5b3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:04.378729805+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/ 2>/dev/null || ech[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1bde1d1d-4414-40f4-b679-cc2c494f9113","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:04.678517263+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:5000/ 2>/dev/null || ech[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c121d13-7353-42b3-b2ec-eaaba312a65f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:05.016211165+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:5173/ 2>/dev/null || ech[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3508b1e0-b1e3-4689-8fd2-0504c9fb252f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:05.333343215+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:4173/ 2>/dev/null || ech[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"363ee705-113b-418e-91fc-ae6be8ed6148","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:05.672166656+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8000/ 2>/dev/null || ech[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6908323-7dec-460c-b215-ca47fe19e86c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:05.989691909+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:9000/ 2>/dev/null || ech[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aac83b07-3235-450b-89ec-740d3a81e0aa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:06.307211793+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:10000/ 2>/dev/null || ec[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec83d62c-f22e-4f5e-9487-7abb2bc07e98","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T14:57:20.862332137+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/.casaos/apps/ 2>/dev/null | head -20 || echo 'kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9af45bfa-b472-44f9-9498-ced6620cf7ac","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:18:43.214243557+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -i chromium | grep -v grep || echo 'NICHT LAEUFT'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f3c279fd-ac7d-4289-804a-f5e837824925","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:18:43.527131829+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep 18800 || echo 'Port 18800 nicht offen'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cfe611d4-1110-431f-9cb0-21769c212ca6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:18:43.820179203+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes tools list 2>&1 | grep -i browser || echo '[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42e825e3-837d-4b8e-b034-51a8999cb3e8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:19:11.952464932+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep chromium-browser | grep -v grep | head -2","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eefef3b1-bc8a-47db-a519-7503f2020029","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:19:12.312192996+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes && source venv/bin/activate && python3 -c \"\nimport async[...redacted 575 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"92b4c077-46a6-41f7-99ac-b265a6ab9665","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:19:56.161252644+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install playwright 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6609a25b-e1c2-4b9b-b8e8-f49943f464eb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:19:56.422881540+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 -m playwright install chromium 2>&1 | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33fb1a3d-0feb-4b4f-a4ac-6b565f085669","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:19:56.795387234+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nimport asyncio\nfrom playwright.async_api import async_playwri[...redacted 1996 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9562296e-3264-4109-9188-24b9ffb02918","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:34:56.745429615+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which python3 && python3 --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba5062ad-67f7-4991-95df-465b6de36baa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:34:57.089210145+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/venv/bin/ | grep -E 'python|pip' | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99f5e0bd-5775-40ae-b614-b0357cb2fb93","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:34:57.373344316+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 -m ensurepip --upgrade 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b1fb0b9-b2cb-4f0a-a5eb-68cf5ac02a31","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:34:59.667201033+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip --version 2>&1 || echo 'NO PIP'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d8f2c4ab-0618-4561-8a35-b33ddfc17e04","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:14.860288641+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/venv/bin/pip 2>&1 || echo 'NICHT GEFUNDEN'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a25384c-bab5-4dfe-bee6-c6d2037310e8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:15.155884756+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/pip --version 2>&1 || echo 'FAIL'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"73adcd4d-e639-4d82-ba7f-eaa510028f06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:16.019086879+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/pip install playwright 2>&1 | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da4480d1-95a9-4dc7-a5a4-8e13b3c78278","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:32.619984238+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which uv 2>/dev/null && uv --version || echo 'kein uv'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"83d6ea0e-e721-4608-9fb2-5b6ecc9be179","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:32.908148248+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which pip3 2>/dev/null && pip3 --version || which pip 2>/dev/null && pip --versi[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e0bdc74d-c440-48db-9cd9-632f6498966d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:33.217108092+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 -m venv --help 2>&1 | head -3 || echo 'venv nicht verfügbar'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f12f6bf1-fda2-4e50-a442-e52fa05aa214","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:33.502769131+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip --version 2>&1 || echo 'nein'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f10fb2ba-10f2-4978-bdf0-8473ef7a6069","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:33.871512955+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -sSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py && ls -la /tmp[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"826da11d-7bb0-448b-8a66-104ddb8d9e4c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:50.810180038+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"python3 /tmp/get-pip.py --user 2>&1 | tail -15","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a6480663-7692-45b0-b649-36ed2a09251c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:53.334740059+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"~/.local/bin/pip --version 2>&1 || python3 -m pip --version 2>&1 || echo 'noch n[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24958061-cad4-450c-a8ce-86c47cd4d506","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:35:53.617475383+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.local/bin/ 2>/dev/null | grep pip","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fed1f891-05b2-416f-ad36-28e14fe10937","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:36:15.145220504+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"PYTHONUSERBASE=/DATA/AppData/hermes/.local python3 /tmp/get-pip.py --user --no-w[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b427cd43-6ae6-41af-90f8-f65885d613e3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:36:18.424147627+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/.local/bin/ 2>/dev/null | grep pip","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9cac940b-edbd-4b05-98fb-77edb78219a5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:36:18.708230562+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"PYTHONUSERBASE=/DATA/AppData/hermes/.local /DATA/AppData/hermes/.local/bin/pip -[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a5a16c7e-41c4-4ad8-85e2-4d315a2e90b6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:36:39.613720+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"PYTHONUSERBASE=/DATA/AppData/hermes/.local /DATA/AppData/hermes/.local/bin/pip i[...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a9157c4-16d3-4113-ab45-904fc6d388ec","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:36:44.107794498+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"PYTHONUSERBASE=/DATA/AppData/hermes/.local python3 -c 'import playwright; print([...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff6626b5-e055-4102-a567-ab533374cf47","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:36:44.379985853+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"PYTHONUSERBASE=/DATA/AppData/hermes/.local python3 -m playwright install chromiu[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"18105600-5d0a-4974-b8b8-f76093f3bc16","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:37:01.670017204+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"PYTHONUSERBASE=/DATA/AppData/hermes/.local python3 -c 'from playwright.sync_api [...redacted 102 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4eb8e37c-b857-463f-807f-b11278699726","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:38:12.854477214+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"PYTHONUSERBASE=/DATA/AppData/hermes/.local python3 /tmp/amazon_test.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"15a09dd2-eaa2-4264-86dc-7cf13c46eb46","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:38:47.846200943+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which chromium-browser 2>/dev/null || which chromium 2>/dev/null || which google[...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f06c772f-bf4c-4f1e-82cb-654a2e8bfee4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:38:48.133680608+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -i chromium | grep -v grep || echo 'NICHT LAEUFT'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f2bd8891-e044-4810-a887-25338253ea84","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:38:48.426187113+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get update && sudo apt-get install -y libatk1.0-0 libatk-bridge2.0-0 li[...redacted 95 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e80fa1e-e141-44d3-9156-6e99efe548e7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:56:51.881070236+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get update -qq && sudo apt-get install -y   libatk1.0-0   libatk-bridge[...redacted 200 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59d8a676-3744-4dab-bc90-07973d2f12c5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:56:52.194351423+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ldconfig -p | grep libatk | head -5 || echo 'nicht gefunden'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"897afadf-5be7-44e3-964c-6daedc357458","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:57:03.436345589+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo -n whoami 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"57f4ac83-67d1-475c-9d88-59e31dd0dfb2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:57:03.723905976+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo -n apt-get --version 2>&1 | head -1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f35ec59-70be-43ef-a158-7f60e5bc10e4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:57:04.038400382+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo -n apt-get update -qq 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"156af2ba-e148-4a3a-beee-0bec45faa252","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:57:13.389829308+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"whoami && id && groups","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03ce6289-08de-4859-bb2b-ed7abce932f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:57:13.676609926+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"cat /etc/sudoers.d/hermes-admin","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b4229c8-3bcb-4873-ac8b-a696362966fc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:57:13.970516918+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"grep -r requiretty /etc/sudoers /etc/sudoers.d/ 2>/dev/null || echo 'kein requir[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b41f936-2e35-43ee-8b99-7877fb72aae3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:57:14.266624554+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"echo 'echo fake_pass' > /tmp/askpass && chmod +x /tmp/askpass && SUDO_ASKPASS=/t[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e343f6a-0496-4b6e-a9e5-25ae5f5bcf41","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:39.096680936+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo -n whoami 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d69c4f5-1a08-40c7-93d1-990d7a61da84","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:39.397394901+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo -n apt-get --version 2>&1 | head -1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90f4e36a-3bcf-4d93-8842-3bb647812a3d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:52.242289833+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which apt-get 2>/dev/null && echo '✅ apt-get' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d856eb8-3b16-4607-9eb0-7610206f7732","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:52.524154744+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which apt 2>/dev/null && echo '✅ apt' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b1ee761-6887-4ae6-b14d-f34ef20f77fc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:52.826092728+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which pacman 2>/dev/null && echo '✅ pacman' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b29fa01-4553-4355-87a2-aca963b60ea9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:53.130563061+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which yay 2>/dev/null && echo '✅ yay' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42934718-eeb5-473b-9933-98ee396eb55a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:53.416630709+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which apk 2>/dev/null && echo '✅ apk' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19b163de-c525-45cc-99b1-351d1807f7d3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:53.699526388+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which dnf 2>/dev/null && echo '✅ dnf' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fdf3046c-de4b-470e-9c7b-baa97c93d0b3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:53.973130987+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which yum 2>/dev/null && echo '✅ yum' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3f0faaa-496c-4f13-801c-99fdc69f71b6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:54.273912279+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which zypper 2>/dev/null && echo '✅ zypper' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbd0e01d-efeb-4459-b78e-8e200761fe1e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:54.577025873+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which emerge 2>/dev/null && echo '✅ emerge' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17360074-f61e-4c3f-b46a-4b56ea16da44","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:54.878223943+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which nix-env 2>/dev/null && echo '✅ nix-env' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4cf28104-27b6-4b78-bace-ad9cd7fc99a4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:55.183149474+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"cat /etc/os-release 2>/dev/null | head -15 || echo 'kein os-release'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9c4440b0-9c58-4b0e-89f9-4640939fb095","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:55.488575790+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls /var/lib/pacman/ 2>/dev/null && echo 'Arch-basiert' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b39fe16f-a1cb-4a1d-a84b-82d3d9474e1d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:58:55.772424165+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls /etc/apk/ 2>/dev/null && echo 'Alpine-basiert' || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"207b0b15-7e4d-4ae7-82b9-55e219ce17c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:09.639802258+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libatk-1.0' | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"413e5ec4-d875-4a3e-846a-54acd224b083","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:18.117932081+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libatk-bridge-2.0' | head -3 |[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6543bb8-2c6c-487a-974b-f253669540c8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:18.810792762+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libcups' | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dab20da1-a531-42cc-8b6f-e81556d93241","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:19.497713879+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libdrm' | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a43d50d3-f54d-4da5-add6-3e13987758a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:20.175880083+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libxcomposite' | head -3 || tr[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6839abe9-0930-4981-b2e0-1c386866af84","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:20.881913898+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libgbm' | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3b71fbb-62d0-4f04-bf90-b8070662dbf8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:21.568861807+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libnss3' | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6e1364a7-9b40-4b6a-8954-4977177798d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:22.248028722+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libnspr4' | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8ea12374-17a1-47f8-a2ec-348a75233a07","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T17:59:22.932768025+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /usr/lib* /lib* /DATA 2>/dev/null | grep -i 'libgtk-3' | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ad00b4e-3701-4e67-bbf9-64c1f8ad6b59","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:01:25.882043110+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"which docker 2>/dev/null && docker --version || echo 'docker nicht gefunden'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"912c9a9a-8620-4fa5-ae1b-409e3ae3d278","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:01:26.171743424+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"docker ps 2>&1 | head -3 || echo 'kein Zugriff'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b53a2c9-2f71-4f02-9479-49904eddecf9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:01:26.472337413+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps 2>&1 | head -3 || echo 'sudo docker klappt nicht'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d633cdb-bab6-441b-aaa8-2a71b9db3ba4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:01:26.781484386+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"groups | grep docker || echo 'nicht in docker-Gruppe'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"786aec10-5aed-4ddf-9b63-0839b11a40d1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:03:37.259571042+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker run -d   --name browser-kiwi   --restart unless-stopped   -p 30000:3[...redacted 222 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad297d09-b2a9-4340-b53d-36c33f774d66","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:04:42.462300086+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps | grep browser-kiwi || echo 'nicht da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec9ec22a-8e1f-4313-b52e-3bc65764989c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:04:42.810890473+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:30000/stats 2>&1 | head -5 || echo 'noch nicht bereit'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"da110690-2f28-4880-acc1-49d29cb025fa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:10:15.383094916+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps --all | grep browser-kiwi","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dee9c172-3603-4f82-aeee-ad7e4e726112","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:10:15.701413226+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker logs browser-kiwi --tail 15 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f315fe51-85ab-4a86-8449-f665900153aa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:10:16.076931497+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 3 http://127.0.0.1:30000/stats 2>&1 || echo 'nicht erreichbar[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"159d537d-2414-43aa-bcf0-52b06832d43d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:16:59.325645682+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker run -d --name browser-kiwi --restart unless-stopped -p 30000:3000 -e[...redacted 147 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17c443a1-ee64-4aa9-a5fd-d8505a2e4255","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:19:40.576072969+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker pull ghcr.io/browserless/chromium:latest 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a40ed35-bdc9-4431-84b4-a7f72e826c3b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:21:10.846289327+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker images | grep -i browserless | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8cd17a4-a43f-4d8b-a0e6-4c952a83b261","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:21:11.588107490+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker pull ghcr.io/browserless/chromium:v2 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf9203d2-b564-4ea9-8bf2-cacc2d0e6eec","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:21:12.555639668+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker pull browserless/chrome:v2 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f85368e0-e4f4-487c-9dbb-c935f36b0a25","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:21:14.082659201+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker pull docker.io/browserless/chrome:latest 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9894ecc1-8a32-407d-9b8b-1efade2b7a78","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:22:44.325720501+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker images | grep -i browserless | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d0914f3c-c74f-47bc-8e32-1b2f51a8b62e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:22:45.161073634+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker pull puppeteer/chrome-headless:stable 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"edd4c58c-8e04-4633-afae-79f66e8d06ca","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:22:46.900797597+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker images | grep -i browserless | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a19eca8c-20c7-4168-8143-ac3205d1e6de","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:05.142297177+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps -a | grep debian-libs || echo 'keiner da'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1cd66a34-0cc6-420c-a740-0df0c4e7f6c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:05.517740389+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker run -d --name debian-libs debian:bookworm-slim sleep 3600 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e7152729-c3a3-408c-9256-e0cd0234b3e9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:12.022328257+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps | grep debian-libs","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e705d31-8741-4444-a567-b980cfd617bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:12.337983194+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec debian-libs apt-get update -qq 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53c40d54-b18d-465d-8ecb-be945450d799","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:14.859200212+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec debian-libs apt-get install -y -qq libatk1.0-0 libatk-bridge2.0[...redacted 315 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee1d5bc7-53fa-496f-85c3-516609d63291","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:41.632355350+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"rm -rf /DATA/AppData/hermes/browser/debian-libs && mkdir -p /DATA/AppData/hermes[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8dfcf55b-d952-49b9-ae24-005c4f32eda0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:53.189906113+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker cp debian-libs:/usr/lib/x86_64-linux-gnu/ /DATA/AppData/hermes/brows[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bde345bf-5712-42b2-b4c7-634b2d50ba17","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:53.671179935+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker cp debian-libs:/lib/x86_64-linux-gnu/ /DATA/AppData/hermes/browser/d[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d03e32d6-d5bd-4565-b65c-ce0bb6222976","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:54.401677043+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker cp debian-libs:/lib64/ /DATA/AppData/hermes/browser/debian-libs/lib6[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a237728-ba1b-454c-916b-3d72533ea8ea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:45:54.719256258+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker stop debian-libs && sudo docker rm debian-libs 2>&1 || echo 'cleanup[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"564a9bd7-d1d6-4653-bd17-586f2dd890a6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:46:05.634060134+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes/browser/debian-libs -name '*.so*' | wc -l","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9cb0b582-ca6e-492a-a57c-8de0e1d5ae4a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:46:05.934122722+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/browser/debian-libs/x86_64-linux-gnu/ | grep -E 'libatk|[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5586f72e-a593-41fb-bb9f-429baeb3d8a9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:46:44.278098712+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"LD_LIBRARY_PATH=/DATA/AppData/hermes/browser/debian-libs:/DATA/AppData/hermes/br[...redacted 2141 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2290b24-f381-42f2-951b-329de066af70","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:46:44.634631348+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"LD_LIBRARY_PATH=/DATA/AppData/hermes/browser/debian-libs:/DATA/AppData/hermes/br[...redacted 2125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"38c30967-fa75-4ee9-9be6-db3dd24d8cb9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:46:44.985150584+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"LD_LIBRARY_PATH=/DATA/AppData/hermes/browser/debian-libs:/DATA/AppData/hermes/br[...redacted 2253 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4a2f73fa-0bef-4d70-8e07-1b0bf96080d6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:46:45.304063237+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"LD_LIBRARY_PATH=/DATA/AppData/hermes/browser/debian-libs:/DATA/AppData/hermes/br[...redacted 2296 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cda683b0-a9a6-4cc1-aab3-9bba1f67549d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:48:08.890682650+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/browser && sudo docker build -t kiwi-browser:latest . 2>[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aab33282-6c50-45ab-9e6e-39d5a2142d33","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:48:42.782751571+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"chmod +w /DATA/AppData/hermes/.docker && echo 'ok' || echo 'nope'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"794da8ff-dc2e-4af7-81c4-7e573ae0396a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:48:43.132989905+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"DOCKER_CONFIG=/DATA/AppData/hermes/.docker cd /DATA/AppData/hermes/browser && su[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59aca77d-22c7-4be0-9122-13f5c7320fb9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:48:43.493020662+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker images | grep kiwi-browser","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0c9b5f42-a51a-4309-906b-09c593bd097a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:49:13.828132366+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker images | grep -E 'playwright|chromium|browserless' | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ecfa8fbe-9939-4b67-bb94-fa1329bb402e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:49:14.166872692+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker pull mcr.microsoft.com/playwright/chromium:v1.40.0-focal 2>&1 | tail[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e35a584f-500a-41e7-832b-c667126b9292","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:49:14.916880073+00:00","session_id":"4b664f59-7f6b-4e0d-8662-c010df3116fd","action":"Allow","rule_ids":[],"command_redacted":"sudo docker images | grep playwright | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d3d75853-92fa-4141-b1f3-9b84c76ca705","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:57:13.764646164+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker run -d --name kiwi-browser-setup debian:bookworm-slim sleep 3600 2>&[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca626526-0d23-4eb9-af00-5603e69afc06","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:57:14.270438137+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps | grep kiwi-browser-setup","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e74413f2-c846-44a4-a9b0-0e92c512c97c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:57:14.570297024+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup apt-get update -qq 2>&1 | tail -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c075c29a-909e-45de-a184-6b701a06ea69","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:57:16.935958538+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup sh -c 'DEBIAN_FRONTEND=noninteractive apt-ge[...redacted 124 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5deae086-2959-4be4-81ec-36ad7e1b4da1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:58:41.507875846+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup chromium --version 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6bdf2da2-0c82-4a8b-a45c-7323e0c198d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:59:44.179448290+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker cp /tmp/tmpnw_rw31o.py kiwi-browser-setup:/app/server.py 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"872849fe-5e29-4194-8109-7af92d640bda","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:59:44.480240509+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup chmod +x /app/server.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5556e5c-ea59-490a-9c59-c009e58c7ae6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:59:44.810594633+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup mkdir -p /app","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d5bbcf24-5792-40da-8988-a29a6f69d306","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:59:45.133098441+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec -d kiwi-browser-setup python3 /app/server.py 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"68942b40-e184-411e-9445-8627f7089646","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:59:47.478454853+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup curl -s http://localhost:3000/health 2>&1 ||[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba708a98-2462-4350-b6a2-6561605686ad","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T18:59:47.835039577+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup ps aux | grep python","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e564b67-de7a-412f-b397-8f952229c8a7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:01:41.940082561+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup mkdir -p /app","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0bbc84d1-52d9-47b9-bdc0-1e41f0035028","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:01:42.226856942+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup chmod 755 /app","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"007da23c-670b-4592-8d79-8f1f829d26ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:01:42.545453277+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker cp /tmp/tmpmqkjke9e.py kiwi-browser-setup:/app/server.py 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eb2d3620-85f8-4fd5-ab4d-2ce1cd292d13","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:01:42.864115976+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup chmod +x /app/server.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1dd9020-ba87-4e95-a884-0dc6c95b6018","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:01:43.184721896+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec -d kiwi-browser-setup bash -c 'cd /app && python3 server.py > /[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24f2685d-d925-43e8-96c9-42fe7ea37b01","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:01:46.569634348+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser-setup curl -s http://localhost:3000/health 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2464e2f2-e92a-4f45-b9e6-1dd39f8f086b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:02:42.871285103+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker stop kiwi-browser-setup 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b608625e-9022-43cf-b62c-3cec407d6da3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:02:53.170961911+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker commit kiwi-browser-setup kiwi-browser:v1 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f05043e-4555-4556-98b5-6c8ff9ed3058","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:03:01.908081598+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker rm kiwi-browser-setup 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79426445-f1ad-457a-96fc-7382036dc634","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:03:02.448149732+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker run -d   --name kiwi-browser   --restart unless-stopped   -p 0.0.0.0[...redacted 98 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c906398c-f4ca-45f2-ab96-2620c1c7a789","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:03:04.960803160+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps | grep kiwi-browser","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3cf3e6e3-7597-42c6-b87b-150328e9eb04","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:03:05.344087105+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:30000/health 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d8284d69-3cb9-452e-bc08-d8b53190d73f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:13.688517560+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/.secrets/ 2>&1 || echo 'Ordner existiert nicht'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e2b53478-e6af-4350-9ac3-540f5748f74d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:13.991788322+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -maxdepth 3 -type f \\( -name '*.json' -o -name '*token[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cef9358e-ec1c-4f08-a873-2e5d4f9a5ff2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:14.315016710+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -name 'gws' -o -name 'gws*' 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f90addb-34e9-4d8d-9970-e6b7a60fee02","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:53.182732929+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"cat /DATA/AppData/hermes/skills/productivity/google-workspace/scripts/gws_bridge[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b4cc5c8d-5be2-4852-a9ee-6c7e9f8d80b4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:53.474685410+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/tokens 2>&1 | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aa7877de-0a13-4c81-9cf6-594051a837b1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:53.787636229+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/.local 2>&1 | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eba6346d-7815-4271-aa19-9aa69e481a7e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:54.073051983+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/.cache 2>&1 | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88b840be-87fd-400e-992f-f139bc8fe28b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:54.345999818+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"ls -la /root/.config/gws 2>&1 | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53b76716-a257-4755-b508-3be0d36da134","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:54.629564319+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"ls -la /root/.gws 2>&1 | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"299af930-2182-41ae-8720-cd51c16c4498","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:29:54.919896374+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/.secrets 2>&1 | head -3 || true","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6034ad0c-a422-4287-8020-3f0216790769","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:30:28.071036526+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"gws --version 2>&1 || echo 'nicht in PATH'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"55d826a1-bdaa-441b-a5a4-520b60219ae8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T19:30:28.368011144+00:00","session_id":"cd5be47e-4b3c-453c-a480-630777b293b3","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/hermes config get google 2>&1 || echo 'nicht geset[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0fbbf61a-eeb5-4000-accc-7063daaa04aa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:23:05.406728983+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway status 2>/dev/null || echo \"NOT_IN_PATH\"; cat /DATA/AppData/herme[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fcc98816-0fbb-4be7-8d24-e774c4c1d83f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:34:18.247741081+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.codex/ 2>/dev/null || echo \"No .codex dir\"; ls -la ~/.npm-packages/bin[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9328a766-568f-471b-aac8-753b4c0ea9da","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:34:19.569638041+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://raw.githubusercontent.com/openai/codex/main/README.md\" | head [...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b00d039c-312c-4b95-9290-48d7b49b55c6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:34:26.967299173+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://developers.openai.com/codex/auth\" | grep -i \"chatgpt\\|plus\\|su[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"13058ac7-fdf2-443a-8254-6f298d3eea94","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:34:28.445045846+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"uname -m","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"34542c00-0ff1-4e91-93a4-1d3b6140d112","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:34:37.550732672+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://help.openai.com/en/articles/11369540-codex-in-chatgpt\" | grep [...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9e4015c6-6f8a-46ef-9be8-77f9b67caee9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:36:55.040881861+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && curl -sL \"https://github.com/openai/codex/releases/latest\" | grep -o [...redacted 86 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"57c59fa7-9d4e-44f1-a23e-107387662517","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:37:00.448747916+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"cd /tmp && curl -sL \"https://api.github.com/repos/openai/codex/releases/latest\" [...redacted 208 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f00827c6-7739-45f9-b402-6272b50294a5","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-08T06:37:09.928019127+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -sL \"https://api.github.com/repos/openai/codex/releases/latest\" | python3 -[...redacted 160 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e67ab485-6dbc-431d-8f01-9ef456863f84","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-08T06:37:15.314973342+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/hermes/.bin && cd /DATA/AppData/hermes/.bin && curl -sL \"[...redacted 122 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6aad54d4-01ab-4188-8546-6e7bb23db080","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:37:25.034965035+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ln -sf /DATA/AppData/hermes/.bin/codex-x86_64-unknown-linux-musl /DATA/AppData/h[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fddf248-fcfa-4920-a6a0-8616dd07958e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:37:55.428928422+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && codex --help 2>&1 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48a577e4-bb70-43d8-8928-7de5f478a4d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:38:02.246319386+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && codex login --help 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44c3d506-023b-4eea-814e-72a828de2ace","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:38:11.553515346+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && export HOME=/DATA/AppData/herme[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a4d84b8-c215-44a6-8108-ea1aa039a74c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:39:08.782404028+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && export HOME=/DATA/AppData/herme[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ba6c488-cb7b-481f-9650-0ae556f3ca3a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:45:40.839588782+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && export HOME=/DATA/AppData/herme[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"172fc517-7c71-4657-8639-2e81444c1f4b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:45:49.361976100+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -name \"auth*\" -o -name \".codex\" 2>/dev/null | head -20[...redacted 146 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f0930c04-1580-4811-8e63-2711433b17cd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:46:05.752556011+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/.codex/ && cat /DATA/AppData/hermes/.codex/log/* 2>/[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9c50e8f-939f-4c8e-83e9-16f675b1f888","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:46:23.977040118+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && export HOME=/DATA/AppData/herme[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7a0c54ad-b93f-42c7-906a-6108c08946f5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:47:21.747998758+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && export HOME=/DATA/AppData/herme[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e697ad6-0361-47ee-a61f-05df37480f7a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:47:31.429052005+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export PATH=\"/DATA/AppData/hermes/.bin:$PATH\" && export HOME=/DATA/AppData/herme[...redacted 139 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"692fd9fd-732c-4555-b831-3964591468f8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:59:06.939091630+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"hostname -I | awk '{print $1}'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d59fffce-905c-48a4-8851-2062923e4060","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T06:59:12.773705457+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ip route get 1.1.1.1 2>/dev/null | grep -oP 'src \\K\\S+' || ip addr show | grep -[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7119221c-b0c4-4f33-90bf-2a90bd23e136","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:00:43.233603150+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"python3 -m http.server 3001 --directory /DATA/AppData/hermes > /tmp/kiwi-server.[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c684db08-abd3-4489-8974-45853f132ac7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:00:49.617078249+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://192.168.178.171:3001/kiwi-intro.ht[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3701263-98fc-4d53-88c7-d3ce15b2a1c5","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink","private_network_access"]}
{"timestamp":"2026-05-08T07:32:12.982326298+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"lsof -ti:3001 2>/dev/null | xargs -r kill -9 2>/dev/null; rm -f /DATA/AppData/he[...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"edfc85c3-3360-49fa-bd5c-8a37e36dada9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:34:23.282746255+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -1 /mnt/ 2>/dev/null; ls -1 /media/ 2>/dev/null; ls -1 /DATA/ 2>/dev/null | h[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7f60bc18-3fb6-418a-8062-fe1ccafa16aa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:34:34.902729914+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/Media/ 2>/dev/null || echo \"No /DATA/Media\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c5def78c-d944-4d07-b38c-85437fb07b3d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:34:48.645422947+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/Media/Movies/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f3e84ed8-1cb6-43da-8ca2-23858c5d02e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:34:54.136356359+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/ -maxdepth 3 -type d -iname \"*film*\" 2>/dev/null; find /DATA/ -maxdep[...redacted 162 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b483c9f-9109-421e-bf8b-c71e6382dbe2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:34:59.476548122+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/ /mnt/ -maxdepth 4 -type f \\( -iname \"*.mkv\" -o -iname \"*.mp4\" -o -in[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63fbd0aa-e4d0-47b0-8f68-71f63cdc47c2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:35:07.676592602+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"mount | grep -E \"(ext4|btrfs|xfs|ntfs|fuse)\" | grep -v \"overlay\\|tmpfs\\|devpts\\|[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44592063-11ba-4811-b43a-999b4425b745","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:35:12.492200554+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/.media/HDD_1TB/ | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1137a74d-2c91-45d0-a596-af6a9c122f8f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:35:17.874218952+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/DATA/.media/HDD_1TB/Medien/\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"27155b73-4273-4a3a-b27a-04d02c6c8277","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:35:23.447844921+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/DATA/.media/HDD_1TB/Medien/Filme/\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72e6779a-0b19-47da-9171-1b10edd9e704","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:37:27.731598953+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"cd \"/DATA/.media/HDD_1TB/Medien/Filme/\" && \\\nmv \"Alter Weißer Mann T00.mp4\" \"Al[...redacted 208 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a5d938bd-4839-4fae-8041-cf432e1aad88","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:37:35.125827670+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"sudo bash -c 'cd \"/DATA/.media/HDD_1TB/Medien/Filme/\" && mv \"Alter Weißer Mann [...redacted 245 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e9a2910-b16d-4a10-9a47-ea1e18f83d63","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:54:08.607933409+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"export HERMES_HOME=/DATA/AppData/hermes && python /DATA/AppData/hermes/skills/pr[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c464fe8-a097-4ab2-a2a8-5a7b66897373","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:54:14.969727784+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/pip install --quiet google-api-python-client googl[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5da3056e-1dbf-45e2-99a3-565d97865b83","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:54:19.900660376+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes/venv -name \"python*\" -type f -executable 2>/dev/null |[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2054b721-2553-4de5-a86a-250fb99907d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:54:26.856725625+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"which python3 && python3 --version && ls -la /DATA/AppData/hermes/venv/bin/ 2>/d[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26191458-4300-473d-b49f-0c8a9fd3d273","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:54:37.852063282+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/venv/bin/pip* 2>/dev/null || echo \"No pip in venv bin\"; [...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88a2cc1b-6a64-4c93-baf3-d7bab97ec593","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:54:44.805535751+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import pip\" 2>&1 && echo \"pip importable\" || echo \"no pip module\"; c[...redacted 88 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c216cffd-b835-4e24-b595-c16270405032","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:54:57.868617764+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"find /usr -name \"pip*\" -type f 2>/dev/null | head -10; which easy_install pip 2>[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"597556d7-e4d9-474a-b385-91f9cdef432a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:56:07.904854566+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import sys; print(sys.executable); print(sys.version)\"\npython3 -c \"i[...redacted 80 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b7c6f28-4e02-457d-a2f0-16fe6abcec4d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:56:22.703196408+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"python3 -m ensurepip --default-pip && python3 -m pip --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"271d6ebb-4b88-487e-9133-22f6243ef2a9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T07:56:45.503159791+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"cat /DATA/AppData/.secrets/google_oauth.env 2>/dev/null || echo \"no file\"; pytho[...redacted 72 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59d79413-39fa-4cd7-aa47-e6e705c1c8b4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T08:00:15.006425321+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"chmod +x /DATA/AppData/hermes/.bin/kiwitime && ls -la /DATA/AppData/hermes/.bin/[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a2200f97-ab4f-4168-aedb-a02016aca57c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T08:37:15.143014871+00:00","session_id":"0ec87409-95ea-4d43-b2c1-740f5e87d3a0","action":"Allow","rule_ids":[],"command_redacted":"curl -s 'https://html.duckduckgo.com/html/?q=YouTube+automation+faceless+channel[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"10790c51-fb7d-4266-93e8-6ecfcb473d5b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T14:28:03.227107710+00:00","session_id":"423a5266-3b89-4a66-8031-385ebc8720de","action":"Allow","rule_ids":[],"command_redacted":"docker ps --all --format '{{.Names}}' 2>/dev/null | grep -i dose; docker ps --al[...redacted 170 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c1a5ff2-68ff-407f-81ff-a4476bc0b910","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T14:29:13.757782516+00:00","session_id":"423a5266-3b89-4a66-8031-385ebc8720de","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/.media/HDD_1TB -maxdepth 3 -iname \"*dose*\" -o -iname \"*daily*\" 2>/dev[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7588197-5ec7-477f-a9ae-af0cb0383376","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T14:29:17.402430862+00:00","session_id":"423a5266-3b89-4a66-8031-385ebc8720de","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/.media/HDD_1TB/DailyDose/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06944991-515c-485c-8ac1-ee0e9b713989","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T14:38:49.913085843+00:00","session_id":"423a5266-3b89-4a66-8031-385ebc8720de","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8765/api/data 2>/dev/null | head -20; echo \"---\"; curl [...redacted 194 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b498545-64c7-4dd8-8e26-59902b5e9dd5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T14:41:36.158148889+00:00","session_id":"423a5266-3b89-4a66-8031-385ebc8720de","action":"Allow","rule_ids":[],"command_redacted":"chmod +x /DATA/AppData/hermes/.bin/dosed","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a05ca85f-1da3-4d2b-9878-a822780880a9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T18:26:31.357628751+00:00","session_id":"423a5266-3b89-4a66-8031-385ebc8720de","action":"Allow","rule_ids":[],"command_redacted":"which openscad || which trimesh || pip3 show trimesh 2>/dev/null || echo \"no\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b497f214-ede2-43d3-8716-300660d4929d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T18:28:57.498413443+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get update -qq && sudo apt-get install -y -qq openscad 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5110dd2-a8bb-43f9-9cf8-9f856e7684b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T18:31:17.758888522+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get install -y -qq openscad 2>&1 | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4bd7c56-ff16-4292-a4f7-2ec7cfd4e3b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T19:48:57.504648456+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"pip3 install trimesh 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1238a00e-9d83-475a-9348-2add49cf0fc9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T21:15:58.354586855+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"which openscad || which OpenSCAD || dpkg -l | grep -i openscad || echo \"nicht in[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d37e3550-c56d-4860-9b44-2e0cf064a453","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T21:17:48.666029776+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes && source venv/bin/activate && pip install cadquery 2>&1[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98f8dde6-a736-4efd-bd8a-0aeea73883f9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T21:17:51.619234549+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install cadquery 2>&1 | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"41ef65c0-93b5-4529-bdf7-bc02717985dc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T21:17:56.133621852+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"find /DATA -name \"*.stl\" -o -name \"*.scad\" -o -name \"*.3mf\" 2>/dev/null | head -[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"93207669-ffee-46ab-b7db-7d76825aca97","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T21:18:21.313023063+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"ls -lh /DATA/AppData/hermes/Projekte/Meshtastic/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"507b59a1-80bf-4db1-8af6-8a6d79c45787","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T21:20:34.303612429+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/skills/creative/bambu-3d-design/scripts && python3 stl_b[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4129001f-fea4-4459-8424-1cb491e66760","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T22:22:54.977516606+00:00","session_id":"0a87202a-fd77-4362-ac6d-6df67602e0eb","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/skills/creative/bambu-3d-design/scripts && python3 stl_b[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"799e5ad9-ed3e-4bfe-98bd-e0cc850fa3c5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:35:56.606453482+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://www.google.com/search?q=dymo+junior+label+maker+dimensions+mm\" [...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7670d18f-1af1-4447-b183-302b7eb5b147","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:36:18.862513490+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://www.amazon.de/s?k=dymo+junior+label+maker+dimensions\" 2>/dev/n[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0291efcc-2efa-4a5e-abf6-82fce2c1ad4e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:38:07.520354033+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://html.duckduckgo.com/html/?q=dymo+junior+label+maker+dimensions[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"40386854-a407-4881-864b-b8f8f4072d37","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:48:56.099737995+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker ps | grep -E 'kiwi-browser|browser' || echo 'Kein Browser-Container [...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5c5e0ab0-ab1a-49fe-9cf3-c31b32464c19","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:48:59.656059292+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:30000/health | jq .","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44b4ef6b-0ee3-48c1-bb98-806f94fa9b3e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:54:02.419347490+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser sh -c 'python3 -c \"import playwright; print(playwr[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1c05f43b-d4eb-4a0c-9778-0c701fd4e9eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:54:05.893181339+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser sh -c 'which pip3 || which pip || python3 -m pip -[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74533251-7bfb-4ccb-84ed-85962f7aff5e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:54:08.618577437+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser pip3 install playwright 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"924a5279-4f2d-4224-b47d-f6a076046759","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:54:12.219880802+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser pip3 install --break-system-packages playwright 2>[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b1e5fb1-b34f-436e-82e3-dfbe80fc3b54","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:54:20.851780705+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser playwright install chromium 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e0a7efd0-5606-48ab-abe1-f49c5f6266f1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:54:52.875861609+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker exec kiwi-browser pip3 install --break-system-packages aiohttp 2>&1 [...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e3d87cf-4a08-46c9-8989-23a0414b40e2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:55:47.726200716+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker cp /tmp/kiwi-browser-server-v2.py kiwi-browser:/app/server-v2.py && [...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d874e5d6-4e10-40dd-998f-40d1129077c4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:56:04.304708316+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker stop kiwi-browser && sudo docker commit kiwi-browser kiwi-browser:v2[...redacted 74 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e971cfe-fd85-4f8f-9fe6-99003e577fee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:56:28.451806942+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker run -d \\\n  --name kiwi-browser \\\n  --restart unless-stopped \\\n  -p 0[...redacted 190 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98780534-b627-417f-b9bf-3150ad7ada0b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:56:38.625058121+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Test 1: Screenshot von duckduckgo.com\ncurl -s -X POST http://127.0.0.1:30000/s[...redacted 252 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8ead7dda-5c64-4e21-ac77-c75416e43680","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:56:49.153113281+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Test 2: Klick + Text eingeben auf DuckDuckGo\n# Erst klicken auf die Suchbox, d[...redacted 1060 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad9f8aae-74e7-48e8-aa2d-f582e8c2aab2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:57:40.522791708+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Besserer Test: Wikipedia navigieren → Suchen\nNAV=$(curl -s -X POST http://12[...redacted 978 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"923bf7b7-7f82-4ea3-9c96-db33ef4fac1b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:58:00.236783700+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Klicke auf \"Weiterlesen\"-Link in Wikipedia-Artikel\nR=$(curl -s -X POST http://[...redacted 322 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fac430d4-3633-44bd-ac7d-7de31eab8883","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:58:19.416795455+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Einfacher Klick-Test: Auf einen Link im Artikeltext klicken\n# Wir holen erst d[...redacted 695 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5996f2d1-7b5a-49d3-a0c2-980a1d1f3898","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T06:59:29.841939994+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Sicherstellen: Logs prüfen\nsudo docker exec kiwi-browser cat /app/server-v2.l[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"916bf525-b00c-4f33-9650-0e8689625335","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:00:16.961813552+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"cp /tmp/kiwi-browser-server-v2.py /DATA/AppData/hermes/skills/devops/kiwi-browse[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"993b8b9a-e67a-4409-a31a-1ca92a7ed31d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:00:26.350563734+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:30000/health && echo '' && sudo docker ps | grep kiwi-b[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"10bffe01-1c8c-4095-8ee2-86d6e786c698","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:08:56.802410453+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Meshtastic kompatible Geräte - Offizielle Doku\ncurl -s -X POST http://127.0.0[...redacted 175 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f15e5455-849c-4d64-8ddb-8703f18f581c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:09:08.303224829+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Screenshot der Device-Liste\ncurl -s -X POST http://127.0.0.1:30000/screenshot [...redacted 611 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"272f52a1-6347-474f-a47f-f1c7afa6d076","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:09:19.769785934+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Berry Base Meshtastic Suche (deutscher Shop)\ncurl -s -X POST http://127.0.0.1:[...redacted 214 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5bd21ccd-0752-4071-9809-103d62614bab","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:10:22.425994535+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Berry Base - konkrete Meshtastic-Suche\ncurl -s -X POST http://127.0.0.1:30000/[...redacted 690 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"032e8a09-5ffe-4749-b561-76db21b2ce86","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:11:46.242432630+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Temu nach Meshtastic durchsuchen\ncurl -s -X POST http://127.0.0.1:30000/visit [...redacted 171 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbafadb5-cc3e-40a8-a493-848322f948c5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:33:19.255930447+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/.bin/kiwitime /DATA/AppData/.secrets/google_oauth.en[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bc51c586-4b4d-4c49-9143-9ce64f7406d7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:33:24.627795962+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"python3 /DATA/AppData/hermes/.bin/kiwitime list \"Persönlich\" 1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aefdaade-3704-4467-89a3-97c65dfa6dbf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:33:32.493095296+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"python3 /DATA/AppData/hermes/.bin/kiwitime list \"[REDACTED:Email Address]\" 1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"429d42dc-e2e1-476e-85ff-fb295b78654d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:33:58.678401883+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Warn","rule_ids":["variation_selector"],"command_redacted":"# Bug im Script: time_min ist hardcoded auf 2026-05-08! Fix:\npython3 -c \"\nimport[...redacted 2386 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"457459e5-de05-4607-9964-874135d9733b","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["variation_selector"]}
{"timestamp":"2026-05-09T07:37:34.111466624+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/.bin/codex && /DATA/AppData/hermes/.bin/codex --vers[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9dfce93-6040-4db1-a8d9-461295c34492","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:40:41.675185492+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/skills/productivity/notion/SKILL.md /DATA/AppData/.s[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"87c29dd7-f928-451d-82f3-c42b8391c9a4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:40:43.006447950+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/.bin/ 2>&1 | grep -i notion || echo \"Kein notion binary\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70b5a4c5-2094-42c6-bfc4-1991c045e6d5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:40:49.295254165+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"NOTION\" /DATA/AppData/.secrets/ 2>/dev/null | head -5 || echo \"Keine No[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9851ab65-4e25-4435-adf5-e04398733f0d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:42:40.362141575+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes /DATA/AppData/.secrets ~ -name \".env\" -o -name \"*.env\"[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"edf3c6c9-acec-45bc-9f0b-89e87dfc9431","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:42:44.474397661+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"ntn_\\|secret_\" /DATA/AppData/hermes /DATA/AppData/.secrets 2>/dev/null [...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a542054b-2c2e-495a-8086-af9aad821bb1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:43:02.669557384+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Token sicher in .env speichern\necho \"NOTION_API_KEY=ntn_321592734727M5CrjFbKM4[...redacted 271 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7bb5c18-3e55-493a-b0b9-b95328e388a5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:43:07.342464699+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Test: Notion API mit neuem Token\ncurl -s -X POST \"https://api.notion.com/v1/se[...redacted 211 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a00b77e-662a-4789-876a-c649c59a5497","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T09:47:23.814485663+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"# Zuerst prüfen: Gibt es schon Bambu-Dateien oder Docker-Images auf dem System?[...redacted 250 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48609d01-ca09-4a73-a16c-f3ceb1a57abf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T09:47:33.927957593+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker search bambu 2>/dev/null | head -10 || echo \"Keine Docker-Images\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69421d34-af50-4a1e-8e2e-35b09c3b089f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T09:47:37.580496237+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker search bambulab 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6d59f87-c2e7-435e-80f5-fc321992f446","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T09:47:55.099848921+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker search octoeverywhere 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1cb5176-a354-4833-ae40-3abba52476ec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T09:48:11.557088851+00:00","session_id":"2083b4d0-030a-471a-bfea-000519c34350","action":"Allow","rule_ids":[],"command_redacted":"sudo docker search orcaslicer 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23496e65-c294-45d1-b6d1-3f4b7b1b1fbd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:05:38.653791019+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import trimesh; print('trimesh ok')\" 2>/dev/null || echo \"trimesh fe[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0cd4dad3-334c-4cc5-93ea-b2b56ea4189a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:05:47.426665137+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import matplotlib; print('matplotlib ok')\" 2>/dev/null || echo \"matp[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2bd0807a-9533-4807-9ebb-bed04eb89350","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:06:22.213105553+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"from PIL import Image, ImageDraw; print('Pillow ok')\" 2>/dev/null ||[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3605adba-a30d-41c8-8ca4-68b714316299","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:06:34.846057491+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get install -y python3-matplotlib 2>/dev/null | tail -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1eade3b2-66e8-4c8b-869d-42345e8a9b86","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:07:52.004057842+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/skills/creative/bambu-3d-design && python3 scripts/stl_r[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24a5767e-3413-48aa-afd2-0644a0f67682","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:08:09.561717873+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp/render_demo.svg","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81cb0a3c-5d6f-41ef-8b7b-703563be5e7f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:08:21.143685564+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"which convert inkscape cairosvg 2>/dev/null || echo \"Nicht verfügbar\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9a07562b-c4a0-4c5e-a5e7-f63c918f0412","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:08:33.050178516+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"sudo apt-get install -y python3-pil 2>/dev/null | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1076952f-a5ec-4941-ab73-e281d77dc28a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T11:09:17.453506900+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"curl -s http://127.0.0.1:30000/health | python3 -m json.tool","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"08663bf6-94ad-4ada-b95e-d7b1070f283c","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-09T11:12:11.663337498+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp/stl_render.png","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"edad5fa1-ff53-4e19-91df-779b37a33987","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:33:16.674028914+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"346599dc-0b5d-4ce9-a8e1-3885991eb34c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:33:24.277068327+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/hermes/Projekte && cp /tmp/werkzeug_box_v1.stl /DATA/AppD[...redacted 99 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59afb606-9932-4214-b7c6-a3b59aa5a76c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:39:39.273965643+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"45a5584d-c6c4-4dc7-a446-a20a0f455f24","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:39:46.861755117+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/hermes/Projekte && cp /tmp/werkzeug_box_v1.stl /DATA/AppD[...redacted 99 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a5acf358-90e0-4b51-bc8b-3b562326bee7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:46:45.101483382+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f0f0607d-fe6b-49ef-93f3-a69f462952a5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:46:54.347557956+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cp /tmp/werkzeug_box_v2.stl /DATA/AppData/hermes/Projekte/werkzeug_box_v2.stl &&[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74c24c6e-cacf-49dd-b020-3844829a4836","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:57:19.714961941+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06007c2a-2735-4846-b6ec-3b808ea150fb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T13:57:23.964098723+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cp /tmp/werkzeug_box_v3.stl /DATA/AppData/hermes/Projekte/werkzeug_box_v3.stl &&[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f0b958b-f8a3-4439-ac4d-b43f3c41d667","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T14:05:25.416856070+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7f86a6f4-3129-4790-8382-6befabda9fb6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T14:40:37.051053515+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box_v5.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"abd947d1-808f-4e0f-853f-bad68a9f7cc2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T14:45:23.215488998+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box_v6.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"724a8ffa-ff3d-4e7b-897a-496e4eb080b6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T14:45:39.282140842+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box_v5.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4cf9df1a-d5ab-485b-aeba-0dfad55a6432","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T14:46:40.070761166+00:00","session_id":"bc172f03-fb1f-45f6-90b9-1b558641c563","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 werkzeug_box_v6.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"94795647-f985-40c9-aeb2-86d6ff35c868","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:14:53.157683667+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 box_175x25x32.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1f1e342e-b28e-40ec-ac3c-6e6f11f088ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:18:43.215007719+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && python3 box_175x25x32.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cacae26d-80cf-4f39-9138-d8a31f7f1527","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:29:02.200295121+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import gradio_client; print(gradio_client.__version__)\" 2>/dev/null [...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d55b919b-489c-4cc2-bf3a-f9962d4e6dad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:29:03.506768852+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/cache/images/img_79630f0814fb.jpg && file /DATA/AppData/[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3d55922-4ecc-415d-94f8-c823f6fa382b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:29:15.512129398+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"pip install gradio_client -q","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49053106-3481-4977-b05a-4ceb9bea8607","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:29:19.662229795+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install gradio_client -q","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d305e80-11c8-46bc-9ced-2dd80ee5b152","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:29:35.750480802+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import requests; print('requests ok')\" 2>/dev/null || echo \"no reque[...redacted 70 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"afc3bdfa-1b16-4b8f-afab-98d196f5e393","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:29:48.962519988+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"# Try Hunyuan3D-2 on Hugging Face via the Space's API\n# First, let's check if we[...redacted 143 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"37e7d9f9-f176-4c46-8e54-92d70c8a38a0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:29:57.727653550+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"# Try direct curl API test to Hunyuan3D-2 space\ncurl -sX POST \"https://tencent-h[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9fd504a7-1a7d-4c9a-aa7d-cd492e5081df","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:30:17.026149153+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"# Let's try to discover the Gradio API endpoints\npython3 << 'EOF'\nimport urllib.[...redacted 597 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"574df88b-0017-47a8-a161-103378c62942","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:30:48.922301634+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"which uv && uv --version\necho \"---\"\nwhich conda && conda --version 2>/dev/null |[...redacted 332 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50c1ef79-51ab-450a-876b-4285cb6748a7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:31:12.256908739+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"apt-get update -qq 2>/dev/null && apt-get install -y -qq python3-pip 2>/dev/null[...redacted 138 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbfe261a-def0-471c-96f9-270d6441f5d9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:31:54.286029766+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"# Try to install pip first\npython3 -m ensurepip --upgrade 2>/dev/null && python3[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cddce484-b9ed-4bc6-9dc6-8840c7aa9692","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:32:06.338880429+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install gradio_client huggingface_hub -q && echo \"SUCCESS\" || ech[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81e053e4-f6e8-4ffc-9e86-62eb0888a649","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:32:24.180517762+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"from gradio_client import Client; c = Client('tencent/Hunyuan3D-2');[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0bede09a-d54c-4c1a-b6c3-9dc3ac7a1c8f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:32:45.864099528+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nfrom gradio_client import Client\nimport time\n\nc = Client(\"ten[...redacted 580 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7854ade8-decd-4fd0-9ee2-a6b6e33a1069","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:32:58.208650648+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install gradio_client --upgrade -q && echo \"upgraded\" || echo \"up[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"76a6b118-42c0-4293-a8ff-850d470a08e4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:33:13.866079517+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nfrom gradio_client import Client\n\nc = Client(\"tencent/Hunyuan[...redacted 596 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7f3ae392-e1f0-4a9d-999f-34190525cee6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:33:36.286164218+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nfrom gradio_client import Client\n\nc = Client(\"tencent/Hunyuan[...redacted 663 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cd6694be-15aa-432c-ae33-14b8be72c879","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:33:56.399183975+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nfrom gradio_client import Client, handle_file\n\nc = Client(\"te[...redacted 688 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"017dda64-014d-4bc3-8d7c-ff77e4f2b324","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:34:21.770804425+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"ls -la /tmp/gradio/18d85d194124d6f4be1761ab1a0e56821bbf582f622d4c03fe4fdb6450fe2[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed117ec5-902c-4e31-9249-6663f04f3618","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:34:31.778452644+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/hermes/files/kiwi_avatar_3d && cp /tmp/gradio/18d85d194124d6f4be1761a[...redacted 143 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aef13066-8ff2-45ec-aa64-93586ecb89b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:34:40.621526526+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"cp /tmp/gradio/18d85d194124d6f4be1761ab1a0e56821bbf582f622d4c03fe4fdb6450fe2770/[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bbf07cbb-88e1-44e6-8d75-33bdad98b759","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:34:47.517877066+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install trimesh -q && echo \"trimesh ok\" || echo \"trimesh failed\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00ec90c6-e6b0-45e0-af99-764a561d59a9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:35:02.288878414+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nimport trimesh\n\n# Load GLB\nmesh = trimesh.load(\"/tmp/kiwi_ava[...redacted 368 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9e8f21d-2c2d-477d-9ae0-fefe423fd851","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:51:05.824709495+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -A \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\" \"http[...redacted 116 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c42c125a-b78b-4acd-a133-03d90b45b575","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:51:52.166230411+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"which yt-dlp 2>/dev/null || which youtube-dl 2>/dev/null || echo \"no downloader\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3d8b84a-8468-4562-a38b-bfd58a4a12f4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:51:56.709929117+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"pip install yt-dlp -q 2>&1 | tail -2; which yt-dlp","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88fdb61f-3149-4f7d-a3a3-61bca575c048","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:52:15.973430382+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install yt-dlp -q && echo \"yt-dlp installed\" || echo \"install fai[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a8c2ebc-3d5e-4f8d-af05-966c9ed19a0b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:52:28.561987287+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && yt-dlp -o \"sukh_video.%(ext)s\" \"https://x.com/sukh_saroy/status/20528[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c78a9379-e098-4e87-8661-ea769823be28","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:53:09.604267989+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"ffprobe -v error -show_entries format=duration -show_entries stream=width,height[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"54b877af-f28d-4f33-897d-49387b65c0d1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:53:16.981723298+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"ffprobe -v error -show_entries stream=codec_name,codec_type -of default=noprint_[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c82388fb-3653-4841-ac8b-5697d7b99014","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:53:26.650520736+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cd /tmp && yt-dlp --dump-json --no-download \"https://x.com/sukh_saroy/status/205[...redacted 255 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3da74784-3f0f-496d-b9cf-7e0d353f970d","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-05-09T18:55:30.230652902+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"ffmpeg -i /tmp/sukh_video.mp4 -vn -acodec pcm_s16le -ar 16000 -ac 1 /tmp/sukh_au[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e8b6e8ef-c95a-4526-a452-eb294b70a5dd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:55:43.037031900+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"whisper --version 2>/dev/null || echo \"no whisper\"\npython3 -m pip install openai[...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4a71012e-97af-41c3-8b80-65cbacadb4d6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:59:29.551681404+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"grep -i NOTION_API_KEY ~/.hermes/.env /DATA/AppData/hermes/.env 2>/dev/null | se[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"41a8b91b-5e07-4068-8f10-33bfe63b761e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:59:41.360640265+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"NOTION_API_KEY=$(grep NOTION_API_KEY /DATA/AppData/hermes/.env | cut -d'=' -f2)\n[...redacted 395 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0aaefdf5-e128-41f8-8e6a-7edd51623552","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T18:59:51.129585766+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"NOTION_API_KEY=$(grep NOTION_API_KEY /DATA/AppData/hermes/.env | cut -d'=' -f2)\n[...redacted 342 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b115372-ca67-4fb5-bbe2-639b8cf5f9dd","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-09T19:05:10.147820169+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"NOTION_API_KEY=$(grep NOTION_API_KEY /DATA/AppData/hermes/.env | cut -d'=' -f2)\n[...redacted 245 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c749a556-572e-4ef3-b78a-7bbe2a7f5691","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:05:40.825550547+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"cd /tmp && yt-dlp --list-subs \"https://x.com/sukh_saroy/status/20528243139974717[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8225b6e8-301f-4ffa-a9fd-63e814cd58c4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:06:38.884045054+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"NOTION_API_KEY=$(grep NOTION_API_KEY /DATA/AppData/hermes/.env | cut -d'=' -f2)\n[...redacted 385 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"917ff4bd-dde5-4a08-9935-c2596e1232af","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:07:04.425881687+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /tmp/sukh_frames && ffmpeg -ss 0 -i /tmp/sukh_video.mp4 -vf \"fps=1/30,s[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bef189c1-4b3e-4fdf-a2da-1fa904a6d4dc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:08:03.862295010+00:00","session_id":"4234be73-af03-4bea-9eae-fa82924928e7","action":"Allow","rule_ids":[],"command_redacted":"ls /tmp/sukh_frames/frame_*.jpg | head -7","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c28c8c7f-4c6c-446e-b8b6-dea52febf9b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:17:27.976862402+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"which whisper && whisper --version 2>/dev/null; python3 -c \"import whisper; prin[...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"de0e049b-67fa-4125-b56b-1e3d564d42b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:17:32.356335680+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"pip install openai-whisper","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f4e7e96-30ad-4b59-9bb9-6c65f746316d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:17:34.738730481+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"python3 -m pip install openai-whisper","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e26ce973-b41c-49ca-8ec6-dbe81452884b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:18:30.867557654+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"df -h; echo '---'; du -sh /DATA/AppData/hermes/venv 2>/dev/null; echo '---'; du [...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"393bfd99-c9aa-446c-97e7-fcfcfa61fbf4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:19:38.827421019+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"rm -rf /tmp/sukh_video.mp4 /tmp/sukh_frames /tmp/kiwi_avatar.glb /tmp/kiwi_avata[...redacted 82 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4547a552-ae61-4e9f-9a01-500560cde987","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:21:38.180993896+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"free -h; echo '---'; du -sh /tmp/* 2>/dev/null | sort -rh | head -20; echo '---'[...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"97ebe26e-7c77-454c-802c-fe60268cac96","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:21:51.037534611+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"rm -rf /tmp/pip-unpack-* /tmp/pip-build-env-* /tmp/pip-install-* /tmp/kiwi_avata[...redacted 211 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1cbd5eeb-f7eb-4891-9548-1ba79c4a4bb8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:23:00.871923660+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/hermes/work /DATA/AppData/hermes/tmp_downloads && echo \"W[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c9c3dce-4816-48e6-8a03-968e712d5cf0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:25:49.210142122+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"which whisper 2>/dev/null; python3 -c \"import whisper; print(whisper.__file__)\" [...redacted 130 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b0f4719-36db-4201-b7d8-6f39951c2092","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:26:11.762705709+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import faster_whisper; print(faster_whisper.__file__)\" 2>/dev/null; [...redacted 118 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a8123e3c-4762-49d8-ab56-91884573f755","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:26:20.128221514+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"HF_HOME=/DATA/AppData/hermes/.cache/huggingface XDG_CACHE_HOME=/DATA/AppData/her[...redacted 283 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d7f205e-a9c3-435d-8a4f-e04d5dca77a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:26:27.119760715+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/work && yt-dlp -o \"sukh_video.%(ext)s\" \"https://x.com/su[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"85b15cd6-416d-4d5e-8ecf-5a8cad2f5fdf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:27:00.677960326+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/work && ffmpeg -i sukh_video.mp4 -vn -acodec pcm_s16le -[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"75c7baef-edd5-489b-9c75-d258d1f4dd39","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:30:24.050358402+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"ls -lh /DATA/AppData/hermes/work/sukh_transcript.txt && head -5 /DATA/AppData/he[...redacted 143 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fee14985-dfc1-4402-b577-0f76d5260107","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T19:37:25.281903798+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"rm /DATA/AppData/hermes/work/sukh_video.mp4 /DATA/AppData/hermes/work/sukh_audio[...redacted 75 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"abe35601-17d0-4ff8-a6aa-abcf5669033c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T20:38:24.961044109+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p /DATA/AppData/hermes/projects","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"157f8442-f11b-4af3-948b-a4641fc15f2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T20:56:02.104957651+00:00","session_id":"8fb06348-6166-47ba-af9c-485214792a6e","action":"Allow","rule_ids":[],"command_redacted":"rm /DATA/AppData/hermes/projects/meshtastic-youtube.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"85964b46-3a72-47bf-a635-6b0c46cd9289","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:52:59.180188934+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"curl -sL 'https://www.agentmail.to/pricing' | sed 's/<[^>]*>//g' | tr -s '\\n' '\\[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14b40f5d-444a-4ee4-88ae-0731336a963c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:53:23.159885936+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.config/himalaya 2>/dev/null || ls -la ~/.config/email 2>/dev/null || l[...redacted 122 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea0ce7c2-487b-44fa-ae9e-a0a27f4e11f1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:54:43.317232086+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"grep -ri \"gmx\" ~/hermes/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d8959a9-6fe5-4414-abcd-5fe3ef405d0b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:56:27.213868172+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"grep -riE \"(gmx|imap|smtp|himalaya|@gmx\\.)\" ~/hermes/ 2>/dev/null | head -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe450894-4a44-46c6-87e1-771e4e40b3ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:56:28.511142575+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"find ~/hermes -type f \\( -name \"*.toml\" -o -name \"*.yaml\" -o -name \"*.yml\" -o -n[...redacted 125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"27cc9422-0e46-4702-8a1e-ced5e1906153","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:07:53.559351610+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"cat /proc/cpuinfo | grep 'model name' | head -1; echo \"---\"; free -h; echo \"---\"[...redacted 125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64228c7f-1540-4448-a406-df1ef1daf97f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:40:57.556362343+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"ls -lh /DATA/AppData/hermes/work/bathroom_3d.html","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d936591-7acc-4ece-8bfd-1a0fb2f39cb9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:41:13.723880685+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"curl -s -X POST http://localhost:30000/navigate -H \"Content-Type: application/js[...redacted 95 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"686d7245-21d1-4117-8a7c-63124e05ad79","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:41:26.075566651+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c '\nimport urllib.request, json, base64\n\n# Read the HTML file\nwith open[...redacted 888 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"29d7ba90-eca6-4ef6-a15a-bd10dec0b852","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:41:44.330029582+00:00","session_id":"f701c970-abee-4908-bf93-4ab49458e77c","action":"Allow","rule_ids":[],"command_redacted":"kill $(cat /tmp/server.pid 2>/dev/null) 2>/dev/null; echo \"done\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"432bf322-1333-4055-b49a-11cad15a56ee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T13:03:29.666479486+00:00","session_id":"b6959c1b-33ce-422d-8235-401eea41cc08","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes/projects -maxdepth 2 -type d | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"404544e8-0bf5-4c1f-bac9-6af504151b54","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:46:52.658084655+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"which himalaya 2>/dev/null && himalaya --version || echo \"himalaya NOT in PATH\";[...redacted 303 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b57195b-a1fc-4931-bbbb-fd101f4f70d5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:46:57.521850313+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"export HIMALAYA_CONFIG=/DATA/AppData/hermes/himalaya.toml; /DATA/AppData/hermes/[...redacted 116 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"511e6731-9900-4742-8880-88b4aaea8fc4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:47:07.610756423+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"export HIMALAYA_CONFIG=/DATA/AppData/hermes/himalaya.toml; /DATA/AppData/hermes/[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1c252d6d-d001-44d9-864d-d75d7088877a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:47:09.108045520+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"export HIMALAYA_CONFIG=/DATA/AppData/hermes/himalaya.toml; /DATA/AppData/hermes/[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bd95c35c-fc1f-42ee-a55f-294d39f70bcd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:47:10.621500188+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"export HIMALAYA_CONFIG=/DATA/AppData/hermes/himalaya.toml; /DATA/AppData/hermes/[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d77001bb-9042-419a-a341-bb19428aa196","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:47:17.497998783+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"export HIMALAYA_CONFIG=/DATA/AppData/hermes/himalaya.toml; /DATA/AppData/hermes/[...redacted 116 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"38383daf-b0bf-4eb5-a818-33fb3b0efd1b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:47:21.639799373+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/work/ && export HIMALAYA_CONFIG=/DATA/AppData/hermes/him[...redacted 118 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"beb3ea29-cb2f-4bfa-8fea-a35c7d50545a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T17:47:24.951700714+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"cp \"/tmp/KW 20 26.docx\" /DATA/AppData/hermes/work/ && ls -la \"/DATA/AppData/herm[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec78bc00-49b3-4a20-be92-ba22a7cb4475","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:09:57.029644868+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"ls -lh \"/DATA/AppData/hermes/projects/obj_1_Gridfinity Pick Holder THS\" 2>/dev/n[...redacted 215 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"819099cb-65db-487c-a8bf-74303f860bc1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:10:40.134573045+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/projects && zip -j \"Gridfinity_Pick_Holder.zip\" \"obj_1_G[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"806bb733-db03-488a-9d3f-232335741482","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:23:07.834957175+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/work && rm -f gridfinity_pick_holder_12slots_15mm.zip &&[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed6f642a-6865-4ec7-bf80-32c28419e445","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:42:26.566458565+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/work && zip gridfinity_pick_holder_12slots_15mm_custom.z[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f937f275-4fa7-4e77-b060-9eac58aeb00d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:44:17.580700848+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/work && rm -f gridfinity_pick_holder_32h_13d.zip && zip [...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9fc4af2e-5892-42a4-a94c-5d83a346813f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:45:40.147847211+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"cd /DATA/AppData/hermes/work && zip gridfinity_pick_holder_32h_13top.zip gridfin[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fa5fe94-7b40-4b38-a4b9-68ed34f52a24","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:51:31.299002250+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"hermes --version 2>/dev/null || hermes version 2>/dev/null || which hermes || ls[...redacted 86 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4901121c-9bae-4b04-9738-dbeceaa1fc70","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T21:40:02.603661524+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://www.google.com/search?q=GStack+what+is\" | sed 's/<[^>]*>//g' |[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fa6d2fd-0371-45a3-8a08-874fd201f3df","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T21:40:11.962100211+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"curl -sL \"https://html.duckduckgo.com/html/?q=GStack\" | sed 's/<[^>]*>//g' | tr [...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b3e9d9b8-ec68-434c-b264-2d6cb2df83d1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T21:41:00.734238087+00:00","session_id":"3650fbec-2eac-4214-a845-153e20cfc93a","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -A \"Mozilla/5.0\" \"https://raw.githubusercontent.com/garrytan/gstack/mai[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0bba9121-e337-479e-95d6-25b68ae975dd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T21:46:55.368414403+00:00","session_id":"d0a2f3de-6379-48af-8d51-fa92ddd22dba","action":"Allow","rule_ids":[],"command_redacted":"curl -sL -A \"Mozilla/5.0\" \"https://github.com/trending?since=daily\" | grep -oP '[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d5d3161-9222-4ba4-913f-1286e749d778","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T05:57:12.083972379+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"which kiwitime || ls /DATA/AppData/hermes/.bin/kiwitime 2>/dev/null || echo \"nic[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bd8ee464-09d0-4b75-91f7-5b70237d3d23","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:20:13.662172695+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"cat /DATA/AppData/.secrets/google_oauth.env 2>/dev/null | head -5 || echo \"Secre[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63ad673f-27c8-4a28-8fad-54f403b616b6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:20:25.109096398+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"cat /DATA/AppData/.secrets/google_oauth.env","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50660bf6-dadd-4bbe-ae35-a20857d06122","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:21:43.815783906+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"kiwitime list Arbeit 14","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d9a5dfe-ae25-4ae2-9163-af0a1d557e95","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:21:48.641260404+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/.bin/kiwitime list Arbeit 14","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4f91785-5553-4111-8327-f2c2f460f240","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:22:12.495053039+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 /DATA/AppData/hermes/.bin/kiwitime create Arbeit \"Arbeit - Ring\" \"2026-0[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c454f0d-0dd7-491a-b133-a16cc7e4b63b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:22:36.741792051+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 /DATA/AppData/hermes/.bin/kiwitime create Arbeit \"Arbeit - Rezeptioniste[...redacted 88 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b14ac92-c2b7-4600-938c-894773fcf818","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:42:40.779032051+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes tools list | grep -E \"browser|web\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6404ca20-bb78-493c-b2fa-0cf3ee67ed62","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:42:43.123705081+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:30000/health 2>/dev/null || echo \"kiwi-browser nicht er[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"97620a4f-f8ed-45d9-b6a7-1f3562585373","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T06:48:56.026223483+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"curl -s -X POST http://127.0.0.1:30000/visit -H \"Content-Type: application/json\"[...redacted 217 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"664f6533-efc4-458e-948d-4fe55ceaed45","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-11T06:49:19.791136981+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"curl -s -A \"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\" \"https://www.reddit.com/r[...redacted 176 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"838e0574-d718-486d-8f82-bdfc8d483846","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-11T07:06:32.384162885+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -name \"AGENTS.md\" 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b0a437b2-a723-49da-8fce-0e3837550ac6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:06:38.472294916+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/AGENTS.md 2>/dev/null || ls -la ~/.hermes/AGENTS.md [...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d513464-a57c-483d-aba2-c4c13223141f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:06:39.806140294+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/ | grep -i agents || echo \"Keine agents.md im root\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d1abd5cd-d1c3-49be-87f2-bd422c69ce15","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:10:55.535656526+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes honcho status 2>&1 || echo \"Honcho nicht verfügbar oder nicht konfigurie[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23bed5ca-2278-4916-a8d3-355e0f6de627","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:10:57.269096831+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes memory status 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"61f159cc-291a-4f88-9063-2d3bda828c9c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:13:55.553810498+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes memory setup 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06c299c3-f2a1-47f2-8e35-86dd0b36bebb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:14:00.090054548+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config set memory.provider honcho 2>&1 && hermes memory status","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"743fe35c-e698-4091-bd28-8556389935d3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:14:43.482181923+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes plugins list 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"579e0847-7d57-4fc0-927b-ac425573763c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:14:45.398155519+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config get memory 2>&1 || hermes config path","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19b0b957-d7d1-45b5-b44f-bcaee29bd85f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:14:59.957244461+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"pip3 list 2>&1 | grep -i honcho || echo \"Kein honcho in pip\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1c7417a4-d6d5-404f-a7f1-d086cc76953a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:15:07.621868358+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import honcho; help(honcho)\" 2>&1 | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"57396a2d-2fc0-43b8-bd70-91bc7b8c7c17","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:15:15.850944075+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes/hermes-agent -type f -name \"*.py\" 2>&1 | xargs grep -l[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf11265e-d06f-40ed-9da8-47527517a0c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:15:17.158517258+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -maxdepth 3 -type d -name \"honcho\" 2>&1 || echo \"Kein [...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16923866-716e-4273-9d30-f87d71638254","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:15:39.927179851+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"pip3 install honcho-ai[server] 2>&1 || pip3 install honcho-ai[all] 2>&1 || echo [...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f2b00b40-88a2-4d5c-b6f8-a95daca32892","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:15:42.661421191+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"from honcho import Honcho; h = Honcho(api_key='local'); print(h)\" 2>[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"642826f5-c1e9-4156-b380-2202013356ca","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:15:56.219816680+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"pip3 search honcho 2>&1 || echo \"pip search disabled\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d655cd2-5a21-43aa-a30f-df8a9ad6ac7c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:15:57.959378568+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"docker search honcho 2>&1 | head -5 || echo \"docker search not available\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a61acccc-5c2d-4b0d-ad8b-1654ccbdaa1a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:16:07.783026325+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sudo docker search honcho 2>&1 | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"89af5696-a63a-4288-b2fe-3f8316292a58","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:16:09.317472447+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"from honcho import Honcho; import inspect; print(inspect.signature(H[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9c2f21e1-0433-4431-9af7-74add9250ff0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:16:16.176873316+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom honcho import Honcho\nimport inspect\nprint('--- Honcho methods [...redacted 81 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fb4888b3-5563-47f7-a705-09dddb044ae5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:16:17.680511549+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom honcho import Honcho\nh = Honcho(api_key='test', environment='l[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"772c8dc6-97aa-44be-bf5d-6f2a583a4a01","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:16:57.767697031+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"pip3 list 2>&1 | grep -iE \"holographic|retaindb|openviking|byterover\" || echo \"N[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14a33e7f-31e9-4e93-9164-32ed9de7eea9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:17:57.502923424+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"python3 /DATA/AppData/hermes/scripts/honcho-local-server.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8389467a-61f8-44f6-8a95-077f3cd7eef2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:18:00.167101485+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:8000/health","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1fc25ab3-78e8-47cb-8a1e-f05671751a5d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:18:06.144962764+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"ls /DATA/AppData/hermes/venv/bin/python*","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe2c6100-9022-4455-91f4-a89f9a227878","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:18:10.804885449+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/python3 /DATA/AppData/hermes/scripts/honcho-local-[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3d35d37a-5ade-40fc-807c-cc01f68ad80a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:18:13.639726840+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sleep 2 && curl -s http://127.0.0.1:8000/health","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7dd78f40-aaf2-46ee-a18d-f014bf36ac28","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:18:48.266033230+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"/DATA/AppData/hermes/venv/bin/python3 /DATA/AppData/hermes/scripts/honcho-local-[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8676dd16-29f5-44e6-9760-af356cc74114","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:18:51.200464527+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sleep 3 && curl -s http://127.0.0.1:8000/health","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"73b3855f-b850-48cb-97bc-92a4f327458b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:19:00.138113126+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes memory status","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ecf1fd6b-f1bf-4e83-b5fb-0aa347080f5e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:19:02.241003687+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config env-path","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"745fb23d-c85a-4a1e-ba51-8911618dcc2c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:19:44.260219591+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config show 2>&1 | head -60","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3d6fa3e4-41ff-4313-a26e-dd15924901eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:19:51.517233272+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config set --help 2>&1 || hermes config set 2>&1 | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5ca80c2f-bc23-4459-9712-71d89ccb4c47","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:20:15.343116539+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config set memory.honcho_api_key local 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7f69841f-cc05-470a-bc20-79d3b62e89df","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:20:17.080844586+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config set memory.honcho_base_url http://127.0.0.1:8000 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98975ca4-a4d0-4c57-8f5d-f6afea871819","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:20:32.376227388+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes -type d -name \"plugins\" 2>&1 | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d4f1c3f1-b30d-4e1a-bfe1-f75f531fe8dc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:20:33.909271632+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"find /DATA/AppData/hermes/hermes-agent -type f -name \"*.py\" 2>&1 | grep -i honch[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19567596-61b2-46dd-ae67-ec1c3ddcda7e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:20:40.102636888+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"ls -la /DATA/AppData/hermes/plugins/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0adf1dab-d228-4de7-8ec8-bf9f7dff99ea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:21:08.282422235+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"grep -n \"honcho\" /DATA/AppData/hermes/config.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06071167-2397-4417-91e3-752b977adfd7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:21:18.781156909+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config set honcho.api_key local 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1057f43a-9d52-4081-a149-ba1957805e06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:21:31.060628730+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes config set honcho.base_url http://127.0.0.1:8000 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a9b6c5ba-d4f5-48ba-8bf8-2030bb40d41d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:21:38.087970529+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://127.0.0.1:8000/health","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6171ad4a-6b44-4cf5-bd3b-64e167710dfc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:21:39.385378788+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes memory status","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"147591e5-ef6e-4c1b-a4af-a76a49d09012","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:21:50.902452782+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"echo \"HONCHO_API_KEY=local\" >> /DATA/AppData/hermes/.env && echo \"HONCHO_BASE_UR[...redacted 72 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fdf3342-4dc5-44f8-b1b6-773719ecea28","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:22:01.125996122+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway status 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2a4a880-3617-4fe4-a7e2-f22fbe95504e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:22:32.489586418+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sudo hermes gateway restart --system 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bd00d644-cfa0-4d61-bbe0-ebcbbb49cc9f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:23:38.861045080+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sudo systemctl status hermes-gateway --no-pager 2>&1 | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fbf76db5-d713-46d2-995e-d0f9b7f953cb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:23:41.882028167+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sudo systemctl restart hermes-gateway 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7719cfb-6f35-4053-8f11-97235e995ed7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:24:15.838080392+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sudo systemctl status hermes-gateway --no-pager 2>&1 | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06ededcf-8061-4593-912f-400431892ab3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:24:19.172182525+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sleep 5 && sudo systemctl status hermes-gateway --no-pager 2>&1 | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"68fb520c-36c9-4502-890c-22683cd6dba9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:24:27.705213352+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sudo systemctl stop hermes-gateway && sleep 3 && sudo systemctl start hermes-gat[...redacted 81 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d587f078-ae91-43d4-a5d9-304b126a666f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T07:25:16.189080363+00:00","session_id":"5af35d35-7dba-4db2-84ca-8c985089b657","action":"Allow","rule_ids":[],"command_redacted":"sudo kill -9 1678960 2>&1; sleep 3; sudo systemctl start hermes-gateway; sleep 5[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a9bc4f6-3c00-4409-90ea-49fca7f56607","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}