{"timestamp":"2026-04-29T05:01:03.578429038+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a794517d-7d82-4412-a084-776a46326aed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T05:01:08.934998019+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25396f98-7896-49a0-b7b7-c36620cbdbc4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T06:00:48.634234116+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d9509568-01f9-4059-8f68-d8a48561851d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T06:00:53.301355880+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa4593af-def8-418c-9ae3-ad66d7ea8b31","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T07:00:28.794845231+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1986a82f-e9fe-45d4-897c-0f1acbb28e8f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T07:00:34.908206853+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"86e27816-b662-48be-afff-e3f57bfca5c3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T08:01:07.596907395+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44a9eca1-9cd3-4ca0-bf4c-352e14e19404","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T08:01:13.680484211+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bec26e3-e825-4caa-957e-61bdccddfa52","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T08:08:37.095127931+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"file /root/.hermes/image_cache/img_59254caaeba4.jpg 2>&1 | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e46398e4-aaf6-4c09-9f50-d13f42964e9a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T08:34:25.861248952+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"file /root/.hermes/image_cache/img_a5456e8e21e1.jpg && identify /root/.hermes/im[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72777ff1-5715-4f20-beaf-6370d95a049b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T08:34:44.633920616+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"cp /root/.hermes/image_cache/img_a5456e8e21e1.jpg /tmp/rocky_img.jpg && echo \"co[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ddfc571-b239-452a-a89f-ecdf700bc6c0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T09:00:39.472437042+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a45b69d0-d5ed-418d-84eb-7ed2028863d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T09:00:44.968850461+00:00","session_id":"9d80455e-a3f9-455c-b403-dd9648733676","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4130f394-80f0-408f-bff1-fe9d28b0015d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T10:01:02.068092639+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"445dee91-85b6-4a99-aac4-14ea7dc41cc7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T10:01:08.664995327+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49e200da-27ac-4c36-bd35-2097cab8816c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:00:28.894872027+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"faafaea6-6a5b-4d9a-874b-c5bc67688b1d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:00:35.700963383+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dce32602-a1d4-4db7-82ff-5e92b75ae77e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:00:42.206482572+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"date '+%Y-%m-%d %H:%M:%S'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35d2d6cb-1fa9-4ab7-afbc-647949476de3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:11:06.623717218+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"hermes config edit 2>&1 | head -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b230e09-444e-47ec-8f62-05ec9ffef802","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:11:12.050870335+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/config.yaml | grep -A5 -i \"vision\\|image\\|tools\" | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ac048052-2669-4c71-9efc-7ed553c8c613","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:11:18.313046386+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"grep -i \"image\\|vision\\|img_\" ~/.hermes/logs/gateway.log 2>/dev/null | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba5c4f38-0d70-4968-9281-2980871e30ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:11:29.455908062+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/config.yaml | grep -A10 \"media\\|image\\|auxiliary\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f9b6de1-a442-4f0c-948e-30c181d3376d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:11:34.733998345+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/config.yaml | grep -A5 \"^auxiliary\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b11f25f1-8881-4b9d-9a9f-a1a033ea493e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:12:13.844786950+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s -F \"file=@/root/.hermes/image_cache/img_a8780e898432.jpg\" https://tmpfil[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1731e451-00ab-437d-841f-ba403efe643a","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-04-29T11:12:55.735009793+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"hermes tools list 2>&1 | grep -i \"vision\\|image\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"567b87c1-2e93-474f-9e1f-889d9fa25dc1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:13:05.084750124+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"grep -i \"vision\\|error\\|fail\" ~/.hermes/logs/gateway.log 2>/dev/null | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"46ca41b3-b530-442c-b2b7-c38463369a91","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:13:57.507935169+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"curl -s -F \"file=@/root/.hermes/image_cache/img_a8780e898432.jpg\" https://0x0.st[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1a8fc5f-9e85-4d6f-808d-cc9dc98a6db6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:14:04.621393145+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s -F \"image=@/root/.hermes/image_cache/img_a8780e898432.jpg\" -F \"key=free\"[...redacted 199 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fe5a17e-e33f-4304-bbc6-ae5aeaf4b31f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-04-29T11:14:17.153491754+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/sessions/ | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"284fa20d-1760-4845-aea4-8242a63477ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:16:18.368559297+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes/image_cache && python3 -m http.server 18765","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b5f49e1-bdef-44e0-8974-4c59fde60c8c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:16:22.566145820+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"sleep 2 && curl -s -o /dev/null -w \"%{http_code}\" http://localhost:18765/img_a87[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3bf6bbc9-2bb9-412f-9fe9-584f4da01bc4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:16:32.638929161+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Block","rule_ids":["plain_http_to_sink"],"command_redacted":"curl -s --max-time 5 https://ifconfig.me 2>/dev/null || curl -s --max-time 5 htt[...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6e94c087-7fb5-444f-9245-07610e79d45e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["plain_http_to_sink"]}
{"timestamp":"2026-04-29T11:16:48.148305102+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 10 -F \"file=@/root/.hermes/image_cache/img_a8780e898432.jpg\" [...redacted 99 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf37b626-34cd-4cee-b8ab-d4b7f8f54502","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:16:54.613255921+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 15 -F \"fileToUpload=@/root/.hermes/image_cache/img_a8780e8984[...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab560e5d-d3a9-4be6-a84d-ddfc681dadde","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:17:01.359647029+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 15 -F \"reqtype=fileupload\" -F \"time=72h\" -F \"fileToUpload=@/r[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26e0d6c0-8075-4a69-93af-0e3534a058bf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:19:21.643948982+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"grep -i \"OPENAI\" /root/.hermes/.env 2>/dev/null | sed 's/=.*/=***/' || echo \"not[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2956a853-cc61-470e-81a5-6954f331eb80","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:19:28.243137732+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"python3 <<'PY'\nimport yaml\np = \"/root/.hermes/config.yaml\"\nwith open(p) as f:\n  [...redacted 426 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"883b9133-a033-44f2-9104-1ed770e5cfa8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T11:19:44.250061013+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"systemctl restart hermes-gateway && sleep 8 && systemctl is-active hermes-gatewa[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"160411ab-3804-456c-b597-34467a5cf6bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T12:01:08.455782887+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c42cb521-727b-47b1-ae9d-ffd65960a940","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T12:01:13.349182604+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2aa1724e-f9d1-4202-8a65-3f3d321583d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T12:21:31.403558212+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"echo \"OBSIDIAN_VAULT_PATH: ${OBSIDIAN_VAULT_PATH:-not set}\" && ls ~/Documents/ 2[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0b7bfb5-76c9-42c5-85f7-47fe5323d18f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T12:21:35.636134609+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"ls ~/Documents/ 2>/dev/null; find ~ -maxdepth 3 -name \"*Obsidian*\" -o -name \"*ob[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"43f2dd67-e255-4984-8975-e6aafabc190f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T12:22:19.273784964+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/ -type f 2>/dev/null | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"55695268-2886-4193-a595-5163dcda7934","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T13:00:19.335573436+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df3db3b8-bc59-4d75-a0dd-a94649c8c585","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T13:00:27.569015785+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbe0f2d9-339d-4dff-b851-bbfc90eded90","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T14:00:52.360668961+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"22c77af6-515c-48ea-a7c0-646272e5602f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T14:00:57.248059412+00:00","session_id":"1e931eec-fc68-410f-aad2-65d7eb4132d5","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c394a6de-dcd7-4c7a-9aec-7fdec4bfa4f5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T15:00:10.537337646+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aab46ee5-b988-44ca-ae52-8eaeed56d52c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T15:00:21.146543399+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0af05b0c-0d4f-490b-a4b9-f08ec71a8198","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T16:00:38.881776026+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a24e9bb9-491d-455b-9aff-b61eea019421","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T16:00:43.971828399+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"97113ada-205b-49b2-b3fd-7e37bbfbe867","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T16:00:50.835360783+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"date '+%Y-%m-%d %H:%M:%S'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0e5f2dae-d25c-4351-97be-0aed9e2a473b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T17:00:07.435775232+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25b7083a-9fa6-45d5-a4f7-7009269e3e5b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T17:00:17.755709529+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d6c60a2c-bc1f-4129-9a32-f0d6c1601504","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T18:00:36.850218197+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"edf3c2fb-55f6-4f17-a61f-e1bdf595047e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T18:00:42.166323296+00:00","session_id":"234f6549-4e5e-485c-9849-b4b1faaf8214","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"73591bd4-575e-435f-bed1-e8a7eb4d0dbf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T19:00:59.599529531+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b3946e37-1257-4c9c-8cc2-bb9c78427f1e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T19:01:05.311731739+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dd8858ff-e4eb-4dc8-8386-9c0c6f4874f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:00:22.945912253+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"openclaw health --json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7bd3994a-6c59-44c6-9f06-d28dd6aba1a1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:00:30.370719657+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"285c0b73-bd1b-48ab-9893-b01e5595159b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:00:40.139743926+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls Jobs/Ongoing Jobs/ 2>/dev/null || ls -d Jobs 2>/dev/null || find . -maxdepth [...redacted 44 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f67cd78b-0e06-4f07-bdb0-9ab2a31fe2df","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:00:44.514501611+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"find /home -name \"00-brief.md\" 2>/dev/null | head -5; find /root -name \"00-brief[...redacted 76 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33f5ab96-4adf-4278-a034-ad6cd1832fed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:00:54.012509364+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"find /home -maxdepth 5 -type d -name \"Jobs\" 2>/dev/null | head -5; find /root -m[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"106fdba7-1274-4eae-a1e5-2e32526ba7c8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:00.737986726+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99a4fb3a-1f78-4188-b97b-be5a14f2f233","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:07.165265385+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"97244332-2362-44e5-a717-b8d05fa225a3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:13.238780172+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb98a0c0-9d8d-41e6-a997-d39e7f332cbb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:14.516006749+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"93019d13-9b32-42e0-8d88-44724af14b63","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:20.819888850+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc919a80-701e-4ba6-a8d8-a63ea05056b3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:27.815179062+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a259af72-dcd5-47af-a539-5d529296e96f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:29.094477623+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 134 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b624b4f2-209d-49b5-be40-9210f4b158a0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:34.164718800+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70f881ac-0988-4ed9-8a43-3bfdb7f5f184","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-29T20:01:35.463609383+00:00","session_id":"21379dbc-06af-40fc-9867-69038be9ee7f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24e2ef3a-4ac7-42e2-8102-78b16e62fcd4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T03:56:32.866113242+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/opsman-work && ls -la","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d435a4a-72c5-4047-82b6-5bf43985927c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T03:56:45.245970622+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"systemctl status clawdbot-opsman.service --no-pager 2>&1; echo \"---\"; ls /home/c[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a5c01fbf-85e7-402c-a4ad-64373a8f4cef","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T03:56:50.475092880+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.clawdbot-opsman/ 2>/dev/null; cat /root/.clawdbot-opsman/config.yaml 2[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"20b3ecc8-13d0-48a7-af20-2b7ca189dbec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T03:57:10.907703949+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json | python3 -c \"import json,sys; d=json.l[...redacted 114 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d8653f7f-4a59-4989-843f-c46a9b3570a0","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-04-30T03:57:25.705970838+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Block","rule_ids":["schemeless_to_sink","pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json | python3 -m json.tool 2>/dev/null | gr[...redacted 82 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"759d845e-3b19-406a-8386-917fef5a04e4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","pipe_to_interpreter"]}
{"timestamp":"2026-04-30T03:57:45.279283260+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Block","rule_ids":["schemeless_to_sink","pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json | python3 -m json.tool 2>/dev/null | gr[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed73f6b7-c755-4aee-9442-5b6d4f7e4edf","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","pipe_to_interpreter"]}
{"timestamp":"2026-04-30T03:57:52.407528534+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls -la /root/.clawdbot-opsman/credentials/; echo \"---\"; find /root/.clawdbot-ops[...redacted 61 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"367350ef-e777-43a3-a918-6dcdef1c4bc5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T03:57:59.168511539+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Block","rule_ids":["schemeless_to_sink","pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json | python3 -m json.tool 2>/dev/null | gr[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25aa0dd6-cb0e-4b6b-8a65-15fd4c917a89","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","pipe_to_interpreter"]}
{"timestamp":"2026-04-30T03:58:09.195236208+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"openclaw channels --help 2>&1 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fde89d3e-7261-42bc-8a34-db68670633a5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T03:58:18.314805327+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"openclaw channels login --channel whatsapp 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b63f88b4-7549-4520-b2dc-7043ec5059c4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T03:59:23.111458683+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"openclaw channels login --channel whatsapp --help 2>&1 | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dc32e4bb-e7c0-431b-9975-f0cf30501122","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T05:02:32.632221355+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Block","rule_ids":["schemeless_to_sink","pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json | python3 -m json.tool 2>/dev/null | gr[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"38392451-cf45-442a-8dd7-c9593ba9ed96","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","pipe_to_interpreter"]}
{"timestamp":"2026-04-30T06:40:35.538091918+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/USER.md 2>/dev/null | head -80; echo \"---SOUL---\"; [...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c1156bdf-8c90-48fc-b197-f1c2f6097232","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T06:40:42.053836642+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Block","rule_ids":["schemeless_to_sink","pipe_to_interpreter"],"command_redacted":"ls /root/.hermes/skills/ 2>/dev/null; echo \"---\"; ls /home/ccuser/opsman-work/Jo[...redacted 140 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e7ef1281-082f-4f6d-b26f-89bc1c75fc28","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","pipe_to_interpreter"]}
{"timestamp":"2026-04-30T06:40:47.154851525+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/apple/ 2>/dev/null; ls /root/.hermes/skills/whatsapp-bri[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ee3b818-4bad-4470-b227-996cadee7ebf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T06:40:53.235716396+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/lfcs/; echo \"---\"; ls /root/.hermes/skills/apple/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"05061c76-3879-4846-9052-8e26c1786baf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T06:41:06.750982300+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/mcp/ 2>/dev/null; echo \"---\"; ls /root/.obsidian/ 2>/dev/null |[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06c87fa1-4854-4d1d-bc3d-7bec7e3d3405","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T06:41:13.153311254+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/vault/ 2>/dev/null | head -20; echo \"---\"; ls /home/ccuser/rater[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff3bb6db-b363-4b8c-bfe5-401b3bfbcd27","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:00:57.399664927+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"07d Daily Diary/\" 2>/dev/null | tail -20 && echo \"---\" && ls -la \"07a Do[...redacted 159 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa6d3087-d4a3-49e5-b995-19002ac74966","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:01:03.332333697+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"pwd && find /home -name \"07d Daily Diary\" -o -name \"07a Dockets\" -o -name \"Job-T[...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bc2b276-e85b-4020-95ec-a3e741bc19c6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:01:08.918850302+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eb31d990-99a0-4017-8083-d2057eb27c26","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:01:14.535281939+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c713a69-bef2-4f0e-812e-e76252a975e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:01:19.835861708+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 207 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"66f0f138-3485-471c-af81-19ddc91e8e41","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:01:24.392321294+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"date && find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of [...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ffd20460-1a8f-4937-b4a3-76d51866ccf6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:01:27.956397819+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25a8f405-12d9-45ae-8696-d4da83430899","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:01:37.899062536+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 340 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67fa8403-c974-4aab-b2cb-da682697aec9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:03:51.474898984+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cp ~/.hermes/config.yaml ~/.hermes/config.yaml.bak.$(date +%Y%m%d) && ls -la ~/.[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d62108e5-472f-494f-8b49-52ba316acc7b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:03:55.386053267+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -i openclaw | grep -v grep","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c9353be-a72c-489c-b77f-b6e1cd24d347","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:04:00.334560669+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"openclaw --version 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b562374-bb24-42f6-ac2c-929092cae81c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:04:05.015927613+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"openclaw status 2>&1 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ca89aa1-aaad-465a-91ef-d9554cea3212","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:04:27.690825389+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"which hermes 2>/dev/null; hermes --version 2>&1; echo \"---\"; ls /root/.hermes/ 2[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"94b0ff23-aa20-4eb5-a875-fe96205411b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:04:38.852957515+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"env | grep -iE 'MINIMAX|DEEPSEEK|OPENAI|ANTHROPIC|OPENROUTER|NOUS|KIMI|MOONSHOT|[...redacted 71 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0d51307e-e2f1-4690-9693-8ba5bf4f805e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:04:46.146904743+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/.env 2>/dev/null | sed 's/=.*/=***HIDDEN***/' | sort; echo \"--[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4fe55cc4-a891-4781-b0d4-4a8ba3acb0dc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:04:52.636597911+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/.env 2>/dev/null | grep -iE 'DEEPSEEK|ANTHROPIC|OPENROUTER|NOU[...redacted 159 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dddb796a-7ad3-4697-9323-a9d3ec815505","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:05:09.229920241+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/.env 2>/dev/null | grep -v '^#' | grep -v '^$' | sed 's/=.*/=<[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35b054ed-78f2-4778-88f3-c92ffc54b160","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:05:22.318407150+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/; echo \"---\"; ls /usr/local/lib/hermes-agent/skills/ 2>/[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bbbf89ff-e35d-4bae-9d3e-b5e2e558909e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:05:39.553434572+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ccuser/vault/ | head -20; echo \"---write test---\"; touch /home/ccus[...redacted 99 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"accc7f31-c0e3-4468-a562-acf85b97099a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:06:18.699349568+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"hermes update --check 2>&1; echo \"---\"; hermes --version 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e40f18d3-ff5c-4cbd-bc15-55d0dab0548e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:06:45.365005995+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"grep -riE 'clawdbot|moltbot|clawd-3|clawd-2|deprecated' /root/.hermes/ --include[...redacted 106 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2637eab-ba7d-49d7-8309-13813957c3de","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:06:52.786056364+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"grep -n 'clawdbot\\|moltbot\\|clawd-3\\|clawd-2' /root/.hermes/SOUL.md | head -10; [...redacted 85 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f5dcf073-1293-423e-b599-2ae0a5ca4f4f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:07:00.552176985+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"systemctl --user status hermes-cli 2>&1; echo \"---\"; systemctl status hermes-age[...redacted 108 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26979bbd-5a6b-4c2f-bd33-03f01a76dbfc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:07:10.235902184+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/whatsapp/ 2>/dev/null; cat /root/.hermes/whatsapp/phone.json 2>[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2829eb2e-96de-4363-8490-24c618ced91c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:07:16.803245425+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/whatsapp/bridge.log 2>/dev/null | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90e7e7b6-29d4-4cda-b41c-be3aab5af8bb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T07:07:26.277699992+00:00","session_id":"fb8c1a59-141c-4b76-865a-e3f4951f7873","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/lfcs-tool-tracker/ 2>/dev/null; ls /root/.hermes/skills/[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0fa5f8af-bf8b-464b-b9dc-4d05172c926b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T20:01:28.376753915+00:00","session_id":"6c0832e5-df81-43e4-8453-b37a60b2548d","action":"Allow","rule_ids":[],"command_redacted":"ls ~/ && ls /root/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"84a5f133-5729-4493-bb94-0d86cc458408","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T20:01:36.618625827+00:00","session_id":"6c0832e5-df81-43e4-8453-b37a60b2548d","action":"Allow","rule_ids":[],"command_redacted":"find /root ~ home jeremy -maxdepth 6 -name \"00-brief.md\" 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5901c273-4ca5-40aa-b55d-e43c99fb06c2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T20:15:11.258752918+00:00","session_id":"6c0832e5-df81-43e4-8453-b37a60b2548d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null && ls /home/ccuser/o[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25e022e7-c27b-4997-828d-bbf139e6cf71","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T20:15:21.995276623+00:00","session_id":"6c0832e5-df81-43e4-8453-b37a60b2548d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91fd7631-965d-47eb-8f73-694a1e0e263b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T20:15:32.149477123+00:00","session_id":"6c0832e5-df81-43e4-8453-b37a60b2548d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutions\\ Plus\\ -\\ HPE\\ F[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ab65b28-a00b-4f5d-aad5-56d6481c1761","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T20:15:36.028496697+00:00","session_id":"6c0832e5-df81-43e4-8453-b37a60b2548d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutions\\ Plus\\ -\\ HPE\\ F[...redacted 90 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa3a280d-71af-48e3-8a59-f1ad7e1fb157","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-04-30T20:15:46.306794332+00:00","session_id":"6c0832e5-df81-43e4-8453-b37a60b2548d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutions\\ Plus\\ -\\ HPE\\ F[...redacted 70 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b104f0e-1699-496d-aed6-3ce9b24a3db8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:54:00.793495133+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/lfcs/references ~/.hermes/skills/lfcs/templates","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e225e0ab-0294-47ef-9c4b-89c0cb22a329","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:55:41.550974436+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/.archive && mv ~/.hermes/skills/lfcs-client-correspond[...redacted 437 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0427c890-112f-426e-a6e9-4cc1f56b89c4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:55:45.331681098+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -name \"lfcs-*\" -type d 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1cb3110c-b909-40e1-a5bb-ed01e798c8af","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:55:57.713892450+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 1 -name \"lfcs-*\" -type d 2>/dev/null && find ~/.[...redacted 135 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48519c1a-3256-4480-b038-4a2de2960edc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:56:07.434650874+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/.archive && mv ~/.hermes/skills/lfcs-tool-tracker ~/.h[...redacted 418 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dae36063-1cfa-4dd1-b919-a612534fc9c6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:56:12.034151559+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills/lfcs -type f && echo \"---\" && ls ~/.hermes/skills/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d67b7e96-ac29-413e-a046-fb919831350b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:56:22.176855409+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/skills/lfcs/timesheet/ 2>/dev/null && cat ~/.hermes/skills/lfcs[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b803f73d-325f-410a-82cf-fe1b49fdc0dc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:56:32.331936864+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"mv ~/.hermes/skills/lfcs/timesheet ~/.hermes/skills/.archive/timesheet-from-lfcs[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3c3019e-31cb-4994-9353-759481988f0d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T05:56:40.965369508+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"echo \"=== .archive/ contents ===\" && ls ~/.hermes/skills/.archive/ && echo \"=== [...redacted 122 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab1e0c65-fc17-4460-84d3-a3d9cee5c284","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T09:51:00.976126137+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"echo \"OBSIDIAN_VAULT_PATH=$OBSIDIAN_VAULT_PATH\" && ls ~/Documents/Obsidian\\ Vaul[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d2a3129b-d875-4d87-bea1-7278ddee4165","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T09:51:06.254083758+00:00","session_id":"7d072429-1510-42b0-8e52-4bb191529274","action":"Allow","rule_ids":[],"command_redacted":"find ~ -name \"Obsidian Vault\" -type d 2>/dev/null | head -5 && find ~ -maxdepth [...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"131fd570-f627-48ce-9ed9-5bc14dc47d75","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T10:44:53.150091409+00:00","session_id":"9d620d56-0b3c-4250-a32b-09aa1f26001b","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e79dc055-9e51-4412-bdf4-dc6ee4ee7bb0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T10:44:57.877312658+00:00","session_id":"9d620d56-0b3c-4250-a32b-09aa1f26001b","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ccuser/opsman-work/daily && readlink /home/ccuser/opsman-work/daily","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d75bcf39-94f1-4b9b-94c5-4a57d0c5a5be","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T10:45:54.043716494+00:00","session_id":"9d620d56-0b3c-4250-a32b-09aa1f26001b","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/_AgentLog/hermes-da[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98d226dd-ef0e-45a4-b3df-cee2d85d0f2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T11:19:58.960848310+00:00","session_id":"9d620d56-0b3c-4250-a32b-09aa1f26001b","action":"Allow","rule_ids":[],"command_redacted":"tail -50 /home/ccuser/rateright-growth/HQ-Vault/01_Daily/2026-05-01.md 2>/dev/nu[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35ea4456-3fb3-4601-8882-ce7039bf3a88","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-01T11:20:04.594189297+00:00","session_id":"9d620d56-0b3c-4250-a32b-09aa1f26001b","action":"Allow","rule_ids":[],"command_redacted":"grep \"^##\" /home/ccuser/rateright-growth/HQ-Vault/01_Daily/2026-05-01.md | tail [...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbd01114-39fb-4d37-9ff4-f5c3247e68be","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:11:37.047083569+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/ 2>&1 && echo \"---\" && ls /home/ccuser/rateright-growth/ 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1dfcb9c-5c76-4b96-be9b-afba6a462ddc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:11:43.427848971+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault -maxdepth 3 -not -path '*/.trash/*' [...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9db09ff3-d8af-40ec-8a67-2969131cffff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:14:51.730240873+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/10_RateRight/ROADMAP.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c76e7234-8c70-4cba-8762-9c9ba91d8ba0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:14:52.036790021+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/10_RateRight/_Brain/Open-Threads.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2420285f-63d3-4964-a1d8-b9bc9f304a69","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:14:52.329527851+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/_Brain/Agent-Stack-MOC[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dc630d92-6ee5-47f5-9313-72372a6dab32","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:14:52.649533532+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/_Brain/VPS-State-2026-[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a9cfd644-3817-4b15-b9eb-21bcc8bc6313","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:14:52.958164524+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/10_RateRight/_Brain/Decision-Log.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"45e2a0e6-eb3e-49c5-985b-7decf8b2f551","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:14:53.278670103+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/01_Daily/2026-05-01.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e9b409d-2c56-4ab9-b553-3eda6dc8d943","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T05:14:53.588031300+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/10_RateRight/_Brain/_Log.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea870104-5d24-4b64-a17f-e2a44d1f1742","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:36.110158749+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/07d\\ Daily\\ Diary/ 2>/dev/null || ls /home/ccuser/op[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b68a3d16-124a-49d4-86d8-e6d50ac15862","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:37.420894602+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/07a\\ Dockets/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69ebcf9e-d06d-466b-87ca-1934ed813b7f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:38.741635270+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/ | grep -i job","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f8227cbb-2eb2-4dc6-8cfa-310e1e56853c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:44.693345732+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ | grep -i hornsby","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bade6c81-f5d2-4e4e-948e-aca3435a273b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:46.003551525+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null | grep -i hornsby","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14f350fc-711c-4cf5-8c8a-03b65b6aa896","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:51.791325390+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8cb9e5d9-581c-46ab-90fa-14fcd89cface","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:53.105065777+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81c01952-e3ea-4827-9114-7d5fbb313d85","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:00:54.404239623+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9cdded71-f42a-40f9-8341-7757f404f564","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:00.086866074+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1bdd1aed-c6fb-44fd-8e77-4014df508e18","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:05.132805049+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"651bd4d9-eb29-4f4d-a162-c349b464f461","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:12.483664389+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b169c539-d982-4a28-a7e6-ff661d87664f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:18.449357492+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e7541a49-bd5c-45c6-9639-cc4a40f5e6e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:24.845346263+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a11771a4-4f65-4c68-ac7b-e3315b64e4e5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:26.158257690+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f5a892c-5cf3-4982-b1be-e2b468557915","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:27.448553274+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/photos -type f 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62d5180d-fc50-4d30-b849-5465c403fd28","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:42.690299954+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"66faa89a-0677-4bdf-9575-8f478fc475fa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:43.994078920+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/notes/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b45b437-324b-4979-97d3-b83a1da1106e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-02T07:01:45.284095275+00:00","session_id":"bce7a352-0760-42db-9f60-cccfd7f4067d","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/state/latest-diary 2>/dev/null || echo \"no state fi[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03a78e8d-eaee-4616-a2ca-e43f0126a959","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:17:54.690881379+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth/HQ-Vault && git log -1 --format='%ai %s'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f133b28-94c6-43f4-a71a-d1610717395f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:17:55.965508347+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active hermes-gateway clawdbot-opsman rivet-voice 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e258530b-0c89-4dcc-9ca5-751f57921bbc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:17:57.242081534+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"pm2 status 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dee7a434-aee7-4fee-af6a-4bb5c8c919cf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:17:58.715362084+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -E '(defunct|Z)' | grep -v grep","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e628302-8d25-4f68-be72-19ba81c6e786","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:17:59.983954081+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"df -h / /home /tmp 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4126aa00-f149-43bc-b16f-5bd5cc201453","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:05.775668422+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"hermes status 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c9e2fe1-908c-4214-a211-0e1109732a5d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:09.830629477+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/logs/curator.log 2>&1 | tail -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81b2e4bd-6901-4743-bbe5-4f1dc83a00cf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:11.110734168+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/daily -name '*.md' -p[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bba59800-4a4f-498a-b155-c95e02d9b65d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:17.949736181+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault -name \"*.md\" -path \"*/daily/*\" -prin[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4c14026-a2b5-4d0f-bc90-501bcd4dcdf9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:19.245106592+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/_System/Investigations -type f 2>/de[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef6323dc-396a-4e02-a15f-6b5b3d03ab31","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:20.545261195+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"Open-Threads\\|open-threads\\|thread\" /home/ccuser/rateright-growth/HQ-Va[...redacted 125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f926864-3297-48b2-9b68-cc9f5a1501c6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:21.813872095+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/logs/ 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ad8de0c-231b-4018-9c64-1614b00d205a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:23.092899910+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/_Brain/CLAUDE.md 2>/de[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2527c96b-fcfc-4c74-b23e-f05fa0b29874","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:30.075703665+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/logs/curator 2>&1 | tail -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df69a939-814b-4742-aae2-0373b7b82494","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:31.344211827+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault -name \"*.md\" -path \"*01_Daily*\" -pri[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0f84197b-e955-48c5-a07e-be3e76643f5e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:32.620739946+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault -name \"*Open-Thread*\" -o -name \"*ope[...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eb8f642b-9441-4017-a74e-6c09b9464f1e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:33.887282977+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"source /usr/local/lib/hermes-agent/.env 2>/dev/null; echo \"SUPABASE_URL=${SUPABA[...redacted 154 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4780d500-ed75-4c1b-bb91-fdd53317aa2f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:35.236797378+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" https://rateright.com.au 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d4748c46-985d-46d8-b52d-ebe161263d46","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:41.870008617+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/logs/curator/$(ls -t ~/.hermes/logs/curator/ 2>/dev/null | head -1[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fb40d1f5-2a97-43a2-a2ac-7b6d3334731b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:43.140317101+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/10_RateRight/_Brain/Open-Threads.md 2[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a067f23e-13aa-4b79-a7d0-7bc14f218e34","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:44.406046245+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/_System/Investigations/Truth-Audit-20[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88065666-72a5-476c-a132-36feb0c9cef9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:45.687896765+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"grep -E \"^SUPABASE\" /usr/local/lib/hermes-agent/.env 2>/dev/null | sed 's/=.*/=*[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3e5d5c20-905e-40e6-b3fe-c07b2c6557bf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:52.453848627+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"ls -la /usr/local/lib/hermes-agent/.env 2>&1 && grep -v \"^#\" /usr/local/lib/herm[...redacted 82 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a2c42ab7-dda0-4f59-bee4-30a11fde97e5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:53.789983315+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" https://eciepjpcyfurbkfzekok.supabase.co/[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"189fd133-7191-4c03-bf6e-f796a63b4e26","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:55.113766440+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" --max-time 10 https://api.stripe.com/v1/b[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f407976-0bc5-4b9f-8e6a-1e0eeeb1e542","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:56.376731600+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/logs/curator -type f -printf '%T+ %s %p\\n' 2>/dev/null | sort -r [...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b8a63b65-6304-4e7d-a9f4-84103d081a81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:18:57.642352095+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/01_Daily/2026-05-03.md 2>/dev/null | [...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c23f4e05-2518-48e6-9156-1b945d6668b7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:19:03.224272567+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"grep -E \"SUPABASE|STRIPE\" /usr/local/lib/hermes-agent/.env 2>/dev/null | sed 's/[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"faa451c4-1488-45e9-91c2-b6515001a472","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:19:04.637775065+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/logs/curator/20260501-055309/REPORT.md 2>/dev/null | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a04cdf2-fad0-4f20-b2f5-71e92809b737","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:30:26.056427764+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | grep -E \"(Started|Sto[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a232372f-46ca-4e06-9893-493eb72a67db","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:30:27.442619239+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | grep -E \"(Started|Sto[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b530e9e-8045-4bf9-b4e1-db9e05f72161","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:30:58.385941076+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | tail -50","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f257c44-84e5-4a6f-8714-9e462fbe8d1c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:31:27.715101109+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/the-50-dollar-app/.env.local 2>/dev/null | grep -v \"^#\" | grep [...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b39805f8-9d5f-4947-bf0e-568abe2ec187","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:31:28.991738463+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | grep -i \"supabase\" | [...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7cdd0f4-42ee-4b8b-81e6-e895727cb690","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:32:11.495892319+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 378 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69917e82-2d7f-43a0-87b3-8232ceb2a3b8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:32:13.651547483+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 377 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"598ced97-f0be-4596-8c0b-39dee2b58e2a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:32:15.182038617+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 383 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e318292b-f17a-4782-a9d1-cc68edea4226","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:32:16.695940016+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 427 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbab797a-682c-4fff-a99a-7f2091237320","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:32:18.209452231+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 357 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cceb0aeb-8e99-4b1e-b5a2-3e5d449efd40","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:32:37.701860429+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 491 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1fc1866a-6b5c-4479-b514-598ecb56da68","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-03T01:32:57.803147080+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 380 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5313422e-89ba-43a7-b70d-ca42c0942ef6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:32:59.317828578+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 650 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1f645123-f1f8-45e7-ac56-2f656f0d29fc","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-03T01:33:00.863649126+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 433 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ce3708d-58ae-4856-9146-03e9335df34a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:33:02.357778771+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | grep -E \"(Server Acti[...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"58e85f0c-83e2-40ae-9c4c-c38b2b5736ea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:33:03.633761968+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-13\" | grep -E \"(Started.*St[...redacted 97 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fd3fe879-459b-45bc-999f-630d66a565eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:33:53.179919495+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | grep -E \"systemd.*: ([...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"690e9427-f6da-4789-b9a8-3b0a502d2617","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:33:54.443047794+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | grep -E \"systemd.*: ([...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0e5807f7-c7a8-4ddf-9e77-8f7ba50d0da2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:34:22.220224553+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"journalctl -u rateright-app.service --since \"2026-03-01\" | grep \"crash\" | head -[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21377282-73f7-4695-ba8b-faa184994810","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:34:47.799594586+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"SUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZ[...redacted 252 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d5381667-426d-469b-b89c-186f7ddacad9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T01:34:50.354145154+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"# Check Supabase API for project tier info\nSUPABASE_KEY=\"eyJhbGciOiJIUzI1NiIsInR[...redacted 315 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a07dd13e-e243-4d8e-ad81-015c852da14e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T02:15:17.864936699+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=caveman+language:python&pe[...redacted 145 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8cc1aa09-ad5a-476f-b93b-fd0afb44e821","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-03T02:15:33.751483062+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/JuliusBrussee/caveman\" 2>&1 | python3 -c \"[...redacted 231 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9aaefaf3-3b7f-48a0-b43c-1400f4418c84","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-03T02:15:35.278339793+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://raw.githubusercontent.com/JuliusBrussee/caveman/main/README.md\"[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee957559-b826-4f43-ac2f-5c2f679bbf66","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T02:15:41.236736687+00:00","session_id":"d131e799-5691-4a71-b7a4-ed49762b2897","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://raw.githubusercontent.com/JuliusBrussee/caveman/main/README.md\"[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ffb9ade7-4deb-4b1e-8a5a-d1d25c9a1cf2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:00:38.785981198+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null | tail -5; echo \"---\"; ls /home/c[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"29632aaf-04e7-4368-b513-f42be1283ba9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:00:45.929397654+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing/ | grep -i hornsby 2>/dev/null || ls /h[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5010b9a-cf5d-410c-9d8f-282fc95c0dd8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:00:50.310949288+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ 2>/dev/null; ls /home/ccuser/opsman-work/Jobs/[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8603c273-59a5-44a8-9e41-668d581ecf21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:00:54.871450474+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f2f882ba-b4d8-417e-bb8d-e181ab28a5b1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:00:59.854358036+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 227 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec75041e-a883-4575-b635-5a60c573621a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:01:04.228687769+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e40b0077-9628-4b08-a36c-665f2836b75e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:01:09.044872846+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 328 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1f8557b6-a530-45e7-95de-b65862bbb2d8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:01:13.616103441+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be256bf6-b699-4749-ace7-68047b43b70c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T07:01:20.301466444+00:00","session_id":"ed529404-ea65-4bae-9710-e6ece9897177","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 130 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69d8e2ee-01f3-4c43-9699-acb486d3664d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:00:53.363074316+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null && ls /home/ccuser/o[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ada827f7-379d-40e5-836c-d6781d9901e7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:00:58.980871810+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bc3777d5-e395-4d5b-a01d-6e0633b1827f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:00.277734655+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/04 Programme/\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc4bbc16-beb7-4c62-9518-61d299e68922","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:04.717178085+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 95 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d7eed9f7-a735-4436-88a1-8c385d30093f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:06.000007568+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"460dc264-16dd-4199-99e3-4d2d39ea5ba7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:14.545429195+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2505908b-beb2-4a8c-9047-07efedb82bc6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:25.343542448+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bd4560ef-62b7-4469-af26-e81def1380c1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:26.617422046+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/04\\ Programme/\" 2>/dev/null || find /home/ccuser/op[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5dd4b1f7-78a0-4be2-868d-fab19d07bfe5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:37.522861046+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 217 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d64d78e-196f-4603-a9c0-c59702f86b3e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:38.797624101+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -name \"_subbie-schedule.md\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fff9b265-9d45-4115-8785-0bf23341641f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-03T20:01:47.178105441+00:00","session_id":"95826e58-3f69-4045-a6d6-2df4f71f4025","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee1b6951-4dd5-40ac-b8ae-d80c733a6030","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T18:47:11.177916255+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" https://api.airtable.com/v0/meta/bases -H[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d1609e6a-1b34-4e5e-9d56-a87299d43756","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T18:51:57.721528479+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"hermes update 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ff750f1-bdb9-4b30-a9f5-4b0878ea6ee2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T20:00:32.438649854+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null && ls /home/ccuser/o[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b886f2c-f655-4f68-8068-27b8b3f62fb4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T20:00:38.332983085+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"10ad146f-d12b-4bff-8870-7ef5c062b9c0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T20:00:47.495319672+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"92838e98-add4-49e2-bef3-4bc7ff554fed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T20:00:55.486549071+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b23b17a2-8dde-41eb-b3a4-c2bc98426d13","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T20:00:56.757009554+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d17f4a1-a8fb-460c-96cc-3a8b28f399af","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T20:01:05.458973501+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59d687c7-b721-4f2d-9a6b-df703f1a2351","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T20:01:06.729299177+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec549602-fee7-4ebd-8a3f-63edef993879","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T22:13:17.042118563+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"curl -s \"https://api.airtable.com/v0/meta/bases\" -H \"Authorization: Bearer $AIRT[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a4b3ab7-7d1f-4898-b778-b3563315bffb","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-04T22:13:45.806718137+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null && echo \"---\" && ls [...redacted 51 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"edfaeac6-942a-454c-a62c-37a7d25a59af","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T22:14:23.998589936+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"grep -i AIRTABLE ~/.hermes/.env 2>/dev/null || echo \"not found in .env\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f592a14f-07c7-44f1-b3a1-569d87239048","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T22:14:28.497438113+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"env | grep -i AIRTABLE 2>/dev/null; echo \"---\"; cat ~/.hermes/.env 2>/dev/null |[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cfa28bcd-23e5-47a8-ba40-99d83dd62d9a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T22:14:34.825113633+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser /root ~/.hermes -name \"*.env\" -o -name \".env*\" 2>/dev/null | x[...redacted 107 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5703184c-c7b9-4501-9136-33c5f25d58c1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T22:23:17.028562956+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Block","rule_ids":["schemeless_to_sink","pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json 2>/dev/null | python3 -m json.tool | he[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"db262b59-d401-48c8-881a-910298a7f55e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","pipe_to_interpreter"]}
{"timestamp":"2026-05-04T22:23:21.837568189+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/root/.clawdbot-opsman/openclaw.json') as f:[...redacted 176 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f1ba976-4417-42c0-aa2c-f0cede9fb9b6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-04T22:23:30.509441607+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 128 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1bf88d42-f459-4c07-84f8-453a4903f9e4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-04T22:23:36.396116169+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 142 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aca2d389-939b-4621-8451-6fd215856ec4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-04T22:23:46.256396321+00:00","session_id":"8e4d629f-2f64-41a5-832a-a10828d17d7b","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 155 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03b65479-a71c-45c1-bfec-edf152885d2b","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-05T09:58:25.687553552+00:00","session_id":"343b4d3f-15ca-454c-a171-f826a38fd7e6","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 323 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c9b0fe93-5795-42e7-8297-e81aba84f589","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-05T09:58:36.051288188+00:00","session_id":"343b4d3f-15ca-454c-a171-f826a38fd7e6","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 325 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf2dc05f-e28e-450f-b21e-5eeb9c1520cf","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-05T09:58:45.728164947+00:00","session_id":"343b4d3f-15ca-454c-a171-f826a38fd7e6","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 160 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50b3c751-2b82-46e6-819d-8d758cb6dd7f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-05T09:58:53.315244882+00:00","session_id":"343b4d3f-15ca-454c-a171-f826a38fd7e6","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 339 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f8fe4866-7fcb-4f1b-966b-8add2242066c","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-05T09:59:06.835944004+00:00","session_id":"343b4d3f-15ca-454c-a171-f826a38fd7e6","action":"Block","rule_ids":["schemeless_to_sink","curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 336 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2fb3c12b-340b-49a9-b284-40726474d49b","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["schemeless_to_sink","curl_pipe_shell"]}
{"timestamp":"2026-05-05T09:59:19.876607509+00:00","session_id":"343b4d3f-15ca-454c-a171-f826a38fd7e6","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"PAT=\"patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e7f0e33deb7f28ae6a901e6fbd02a8[...redacted 420 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0315e206-18c5-4e2b-a47a-0e9a767b513e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-06T12:09:24.836180298+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"hermes --version 2>/dev/null || hermes version 2>/dev/null || echo \"no version f[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"661885f5-6b1d-44cb-98bf-b0e3ea375ef2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:10:21.905207662+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"hermes update","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ac8eefc1-6a96-4fc4-b343-32de04a3e19f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:33:49.090236825+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"hermes --version && hermes update 2>&1 | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"406b2e15-a324-44d8-9dc2-218f358c9f8d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:39:33.354425039+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/ && echo \"---\" && hermes profile list 2>/dev/null && echo \"---\" && [...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"77aed2bd-5b81-4de0-a863-c05e6d76b889","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:39:48.015780611+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/ && echo \"---\" && ls ~/.hermes/profiles/ 2>/dev/null || echo[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"304b591e-64aa-49f7-8c8f-1c8caa6f75b4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:39:58.023305434+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/hermes-backups/ && tar -czf ~/hermes-backups/v0.12-pre-profiles-$(dat[...redacted 197 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a6c4ba64-65c2-452e-be06-4507e4b29e98","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:40:09.565848359+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/hermes-backups/ && sudo tar -czf ~/hermes-backups/v0.12-pre-profiles-[...redacted 237 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a23bf448-4319-4f5b-912b-6697b247ee07","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:40:23.298292859+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/hermes-backups/ && cd /root && sudo tar --exclude='.hermes/sessions' [...redacted 233 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33bb9a79-7583-4c8c-9f23-a0dfda8ac8c4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:40:35.898949245+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway stop && sleep 3 && echo \"gateway stopped\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"769dd075-4009-4b51-bd9e-f673e8cc2a76","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-06T12:42:44.505339684+00:00","session_id":"fa4096a0-0192-40ae-b04c-f54f86caff56","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/hermes-backups/config-snapshot-$(date +%Y%m%d) && sudo cp -r /root/.h[...redacted 505 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3860f897-3116-4cdf-a9bb-e1724cb31c03","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:23:04.395711826+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"hermes profiles list 2>/dev/null; echo \"---\"; ls /root/.hermes/profiles/ 2>/dev/[...redacted 278 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bf209e6b-f046-4979-9784-3180932ef85b","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-05-07T04:24:14.960034183+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"hermes config 2>/dev/null | head -60","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d8c5c28b-ae78-451c-852a-12b72952041b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:24:16.651800205+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"openclaw config 2>/dev/null | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c96d8edf-f401-40ac-9211-0440430d268a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:24:21.131597788+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"hermes mcp list 2>/dev/null; echo \"---\"; openclaw mcp list 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e747aae-5c79-4549-b460-6d730d34c2bb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:24:45.734674350+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json 2>/dev/null | python3 -c \"import json,s[...redacted 110 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7a3cb4f7-a562-416e-8301-56d76857f54a","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-05-07T04:24:47.017676990+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/hermes-work/ 2>/dev/null || echo \"NOT FOUND\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bb6cdf4f-285a-42a8-8504-a80e6415e640","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:24:48.287125018+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active clawdbot-opsman 2>/dev/null; systemctl is-active hermes-gate[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dee498a2-2345-46ae-a8d9-a31099cf0d88","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:24:58.165116386+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"hermes config set agent.max_turns 90","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d995a08-374b-4e13-86b4-afe2e3af1a0b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:25:33.271092378+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"AIRTABLE\" /root/.hermes/config.yaml 2>/dev/null; grep \"AIRTABLE\" /root/[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79dd261d-9efc-4d93-94d0-68544eabc6a6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:25:41.619809123+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"CLAWDBOT_STATE_DIR=/root/.clawdbot-opsman OPENCLAW_STATE_DIR=/root/.clawdbot-ops[...redacted 197 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbc1a04d-e7f4-4000-995b-1cb519c2e337","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:25:55.785447574+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"hermes config set lfcs.jobs_root \"/home/ccuser/opsman-work/Jobs\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e93085b5-60f3-464d-b025-d10e2fee8117","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:26:03.985821616+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"systemctl restart hermes-gateway && echo \"Hermes restarted OK\" || echo \"Hermes r[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f472538a-d620-49c9-96bf-49592d6ab33f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:31:06.114432004+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"systemctl restart clawdbot-opsman && echo \"OpsMan restarted OK\" || echo \"OpsMan [...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"08957e27-7b33-4b8a-9720-ad5132ae5ca1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:32:01.165799641+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"sleep 5 && systemctl status hermes-gateway --no-pager | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b30b33b-6a93-42d7-9e99-0ea2eff013eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T04:32:49.213887111+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"hermes config set display.personality \"concise\" 2>&1 || hermes config set displa[...redacted 173 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9e054382-669f-4b1f-83e1-b239a9cffc87","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T07:00:59.498688614+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ 2>/dev/null || echo \"NOT FOUND\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5738b97d-d44f-4b50-a985-8fff4e919e87","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T07:01:03.472740043+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14f915d8-f860-4f97-b2e0-c2bd6d6b6fe5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T07:01:04.838122274+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Upcoming/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dec2e858-2cdf-48ad-8bec-b71aee37aa63","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T07:01:09.789968210+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25fce111-8cd6-4315-bbf7-fa30efb7dac9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T07:01:14.852796992+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0dd4cef8-5e67-474c-b5ad-49b51782f003","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T07:01:22.689612646+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0605021f-ca26-4efb-87ce-f72282ed2ddf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T07:01:23.989425060+00:00","session_id":"abc4a1c7-bc7b-4c22-85fd-cd5a2894d2e3","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d518cd1-a297-42c2-bd2b-cf4e3c606969","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:00:47.408215914+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing%20Jobs/ 2>/dev/null || ls /home/ccuser/[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"84c25c90-08d5-4ee6-9581-33bea6533920","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:00:53.757155371+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - Solutions Plus - HPE Fi[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"45eb843e-77bc-40a1-be5b-9b676b31868f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:00:55.059033107+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - Solutions Plus - HPE Fi[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b66f1fce-c851-4d6d-9408-3f9b4a402244","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:00:58.679172738+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - Solutions Plus - HPE [...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"acb76616-7be9-4748-94fe-26bc1c788223","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:01:03.089400490+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs\" -type f -name \"00-brief.md\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c4594e4-26bf-461f-a3a4-5812e6caafde","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:01:04.387335355+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs\" -type f -name \"Job-Tracker.md\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2ddcd8ee-3c70-4102-ab82-8870755bf5cf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:01:14.292998633+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1fe5ad6-ebf7-4b61-975f-6189ab14d6c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:01:15.581242548+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2ff4acbc-4717-4b25-a83c-26ca03dabd5c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:01:20.361114376+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d26f8b3-f6f2-45e8-8423-72fb75c92d36","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:01:26.341340922+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06c9571e-1f36-4d8e-97a4-f838b103315b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-07T20:01:32.592424939+00:00","session_id":"58dd626a-2ac4-4c0c-98dd-3ad80cacb860","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 98 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3c11e77-5541-4dd8-9059-c4a4cca1fe0a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:26:33.610677298+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"hermes profile list","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca88b547-1c6b-4594-8f36-3919c8e95e4a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:28:16.515297359+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"hermes model --profile rr","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35a19ef6-d3e1-4ed8-9d4e-01c49605d239","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:28:20.549152310+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"hermes config set --profile rr model.default \"kimi/k2.6-thinking\" 2>&1 || hermes[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62da0796-8a30-438a-b34f-9d5f3e04d278","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:28:24.265910195+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"hermes profile show rr 2>&1 | grep -A2 \"model\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3bfb9fe-00b4-4369-8e98-ee850767af95","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:28:28.132774343+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"grep -A3 \"model\" /root/.hermes/profiles/rr/config.yaml","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8dc1b334-318c-498c-bfba-768b7c20ed2e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:31:12.447362674+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"tmux new-session -d -s rr-audit -x 120 -y 40 'hermes --profile rr' 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4adf7f59-a287-485c-9633-ae89b8d50995","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:31:18.169871133+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"sleep 8 && tmux send-keys -t rr-audit \"Audit the RateRight vault at /home/ccuser[...redacted 323 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a0db53e-dc11-4e22-a422-76a5f6466a26","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:31:31.067675466+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"sleep 60 && tmux capture-pane -t rr-audit -p | tail -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98533772-5f2f-4d99-932c-a5bdc8b49667","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:32:39.324338221+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"tmux kill-session -t rr-audit 2>/dev/null; echo \"cleaned up\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0818c4db-c618-4ef4-9bc0-7f1537f20491","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:32:45.953702618+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/10_RateRight -name \"*.md\" | head -60","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"98bda24e-e92f-49d4-a814-32d2d0bef2c2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:32:58.864018913+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/10_RateRight -name \"Active.md\" -o -n[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3971c50e-545b-4bba-908c-6894751b4d89","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T20:33:00.151317857+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"pm2 list 2>/dev/null | grep -E \"hunt|hostel|growth|rate\" | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"34f3e599-bbaf-4c32-a538-675a9ac6a6ea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T21:14:41.679313507+00:00","session_id":"d3acd41c-16bf-47b9-9009-e25e949e7b00","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault -name \"*.md\" -newer /home/ccuser/rat[...redacted 98 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e0732477-f955-4b6a-8b49-618059bd513d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:02.461838506+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/ 2>/dev/null && ls /home/ccuser/opsman-work/07d\\ Dai[...redacted 168 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c793cbd3-811c-42d3-a861-dd393d12d349","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:08.942801722+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 72 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e45975ae-7a28-42e7-ba67-2b614b4a2813","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:10.238166006+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d4b076dd-ab83-4bfd-ab9b-b07e7293c7e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:11.551791516+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63245f05-4fd2-4e0b-b99a-c26223f92cba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:18.358949932+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2172d83e-d823-49ac-8b46-69192d584429","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:19.649796889+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 61 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"031a57a3-8cf0-4b91-a3d3-5d67a193a092","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:20.957871988+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/daily/\" 2>/dev/null | grep \"2026-05\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5be43c19-ae91-42ed-9e48-acb03015094f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:29.979829113+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a64de3d5-9b7a-4ceb-9943-3306b2c96f43","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:31.279980274+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"698410f4-5549-44e4-b147-ca60c3ab8513","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:32.569534090+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79e122c5-0a6e-47f3-a6a0-19b171de3b21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:44.964591248+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null && cat /home/ccuser/opsman-work/d[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5efaf56-6cde-4ce9-8d96-bea94953480e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:46.249200736+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/health-log/$(date +%Y-%m-%d)*.md 2>/dev/null || ls [...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5dc827c-3236-48f5-8cfa-aea4cf3ff84a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:47.544823591+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Pla[...redacted 103 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d92b8db-efa6-435c-952d-5c240dd567d4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:54.400999881+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/health-log/2026-05-08.md 2>/dev/null && echo \"---\" [...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21edb978-b901-4cc8-925e-c5a8ccfcecdf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:55.698651526+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/ -name \"*.md\" 2>/dev/[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b00bea5-7ce4-4e1a-8889-794b8e0cb6fe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:01:56.990241712+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 209 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5c8db330-27a0-465a-a65a-f72cd34c5417","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:02:06.212760001+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/photos/ -name \"*Hornsby*\" -o -name \"*2275*\" 2>/dev[...redacted 98 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"479df3e2-f6b2-472e-b8b0-9b6002d00554","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:02:07.514892614+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 44 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"664fdf2e-ef5d-4541-bda6-dc9116d1d3e7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T07:02:08.809367189+00:00","session_id":"6ed822de-1d3a-4846-93dc-18924baa3979","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2558f479-35e2-43bc-bd5c-3aa158e5dc96","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:25:42.239185775+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null | sort | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ee2487d-6682-49b6-8137-93819ec76847","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:25:43.549346415+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/hermes-work/daily/ 2>/dev/null | sort | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f2460f7-de77-4655-9bf8-af7530027455","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:25:52.065243036+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/daily/ 2>/dev/null | so[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5b061bc-d0c3-4b02-ab2e-392246de50ac","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:25:53.362032488+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/ -name \"*-2026-05-*.md\" -o -name \"*2[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e80b2700-755b-4b23-b282-b0887ab02ecd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:25:54.656248181+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/ -name \"_Log.md\" | xargs ls -lt 2>/d[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"079ca16a-5c05-43b2-8b7c-3356e910ed52","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:26:16.242748290+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"tail -50 /home/ccuser/rateright-growth/HQ-Vault/01_Daily/2026-05-06.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fc45d56-3ef1-4709-a086-8b123e16a773","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:35:02.702013588+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/2026-05-10.md 2>/dev/null && [...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30de07d5-dec8-4ffb-8dde-db91885c7fdb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:35:04.250504193+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/01_Daily/2026-05-10.md [...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea67ddaf-7401-46f8-96d8-e3cade6188ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:35:54.721055839+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git add HQ-Vault/01_Daily/2026-05-10.md HQ-V[...redacted 162 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d335b796-0de3-4e83-8723-ad0123fcda6e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:59:38.572801910+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/ | head -20 && echo \"---\" && ls /home/[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b10665d-371e-48f9-883a-7e9b97cc5418","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T23:59:39.878807320+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/_System/CLAUDE.md 2>/dev/null | head [...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d8de9aa-e695-4fbc-bb35-ca2f821c96b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:09:43.488973811+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git add HQ-Vault/_System/ChiefOfStaff.md HQ-[...redacted 134 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3a63d38a-a7a5-43dc-a21e-88e0b4c572a1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:10:04.438896735+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git add HQ-Vault/11_OpsMan_LFCS/_Brain/_Log.[...redacted 92 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"db42bd98-bfbb-4b35-9d72-e43c74ef8c60","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:10:15.730152919+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git add HQ-Vault/11_OpsMan_LFCS/_Brain/_Log.[...redacted 147 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21bc93a8-94f5-4e0d-9c34-be16dc2ea4ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:10:39.589443476+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git add HQ-Vault/01_Daily/2026-05-10.md && g[...redacted 102 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01cf6d29-16a3-451c-a54b-321eae4dde53","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:10:48.741479063+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git add HQ-Vault/01_Daily/2026-05-10.md && g[...redacted 103 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a6d6c3e-6574-413a-85d0-66b122a39131","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:12:12.192671551+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/VPS-Access.m[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"96291882-a5f0-43a0-8139-4248efe2d5de","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:12:13.596774695+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.ssh/ 2>/dev/null && cat ~/.ssh/config 2>/dev/null | head -50 || echo \"no s[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fa40a604-8294-406a-9a94-b764bd07c249","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:12:14.970798404+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/_System/SKILLS.md 2>/dev/null | head [...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f96e1064-e5e7-46c9-b2c5-e04b2a85343a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:12:52.596859949+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/10_RateRight/FOIL.md 2>/dev/null && ec[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"57a0a41d-a104-4de3-9543-297ce89b572a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T03:12:53.926365744+00:00","session_id":"9a05164a-7fb1-499d-8063-3bb119c53c34","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/12_SiteOps/FOIL.md 2>/dev/null && echo[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"07127df8-ea83-45e4-ae54-8062a5f2323e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:37:30.180987763+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"hostname && ip addr show | grep -E \"inet \" | grep -v \"127.0.0.1\" && echo \"---\" &[...redacted 92 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c2918ad-d506-437e-9cb9-339efdc40d67","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:37:31.485461674+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"arp -a 2>/dev/null | head -20 || cat /proc/net/arp 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b7dae43-ff8f-4779-a683-247b054b8129","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:37:32.786594802+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.ssh/ && cat ~/.ssh/config 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ffdf5105-a777-40f8-bc54-b5b1dc74872f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:37:44.277409868+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no michael@100.108.207.15 \"echo[...redacted 44 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b3bf6b5f-eb00-4da5-a259-c3c463e18dc7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:37:50.649362504+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no root@100.118.241.100 \"echo o[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d932dfa5-6a29-4c1f-ac10-a3bfb7d68baa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:38:13.359244407+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no -o ProxyCommand=\"tailscale -[...redacted 137 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74320667-6fe2-4c1a-af0a-28f2df878b25","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:38:19.736498499+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"tailscale --version && tailscale ssh --help 2>&1 | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5fc61ce4-38d2-47c8-8423-3240370eddc2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:38:41.685357099+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"tailscale --socket=/run/tailscale/tailscaled.sock status --self --json 2>/dev/nu[...redacted 137 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8ca3cc86-ee0f-47f2-ba60-7e23afc37eb1","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-05-10T05:39:46.572228283+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no ubuntu@100.108.207.15 \"echo [...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f324028-990c-4cd5-8ca3-7659387014a0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:40:07.727471044+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"# Check if the laptop has Tailscale SSH enabled\ntailscale --socket=/run/tailscal[...redacted 281 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0532c8c-d11b-49ae-acfc-d8fe2a1e3027","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-05-10T05:50:16.831272038+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 -o ConnectTimeout=5 -o StrictHostKeyChecking[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"55a05172-afa3-472d-ae76-82b211900ed5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:50:56.028001851+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cd /c/rateright-growt[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f784b49-bd32-48a3-9ebb-2e2cdc9f1764","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:51:01.539344504+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"ls /c/Users/mclou/ 2>[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81f40f18-5082-4767-854d-220fb02910f4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:51:11.333066417+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir C:\\\\Users\\[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3595571a-f4b0-440d-b117-d0b9e66fc830","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:51:18.198925998+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir C:\\\\Users\\[...redacted 205 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e6742d15-3083-4407-8829-7d022079a08a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:51:24.804136183+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c \\\"cd /d C:\\Use[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb3281f1-6b7c-4970-8a06-1848f982407a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:51:29.858207152+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c \\\"cd C:\\Users\\[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2463a1ac-a881-4417-aaf1-6fe945cfaa50","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:51:36.233585698+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 137 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dcc0090e-b738-4249-9b58-6f3a12e0855e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:55:19.142045914+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c \\\"where claude[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19f7ebd2-4f41-4805-bd66-303946ee212d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:55:40.789788094+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c \\\"cd /d C:\\Use[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"215bbd2f-a2d8-409a-85c5-7214f41caf77","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:55:49.908237013+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 70 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6e12668b-8e1e-4dd4-97d3-175f1b210f2e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:55:56.728768050+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f8dc1e66-8f98-4b38-ba42-7ecc55fd94b4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:02.044134650+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5704164f-1da2-428f-a277-9e0be50f97ea","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:08.366954587+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 100 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c10de52a-6e7d-4bd5-9fc0-363c85bb5791","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:14.863072215+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"396fbb75-11ff-48f7-a86b-0376c59c9ac8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:20.191493363+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad64d4dd-7aaf-43b5-b947-d7cd82adaa68","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:25.892775277+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f0aa017a-8812-4db3-9b71-55e399e48194","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:33.508079426+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 117 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"96f413e8-8ce9-4c56-a1df-2979ffaf50ba","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:43.059200296+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 76 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f211cf09-8c6e-4989-b29f-5a68ad5eac9c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:56:52.047074133+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 133 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ce7910fd-4c77-4600-8548-3d15003d8a15","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:57:09.411967323+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 90 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5d6b0d7-6cb9-4e86-b7bf-758d929b226e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:57:22.774667849+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 158 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"890625cd-2af2-4b55-9fd1-36f8bfbebbf6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:57:42.524514713+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 323 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aefefd0c-4b78-42f2-93cc-b0df4ff3fab7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:58:17.080771663+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 101 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b6932ebf-4d88-417e-a663-45b140b09988","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T05:58:23.257269767+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 75 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d1468248-5e22-4930-8acd-6f1952ea304a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:00:14.269979709+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -7","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"690bef7d-d93c-48c6-b577-527468d27e81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:00:15.851405550+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/_Brain/_Log.md 2>/dev/[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2ad81e19-94a2-456e-9a33-ce7fe4b4d920","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:00:17.364763456+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/FOIL.md 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc235be7-7e28-4ebc-a292-24414cdd0d26","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:00:34.580921757+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/daily/2026-05-10.md 2>/dev/null || echo \"NOT FOUND\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b6ee0f5-8bd9-4cd5-885a-fbfa7a52c02f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T06:00:36.049223788+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/hermes-work/daily/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fbde3f73-3a80-42be-9a29-4e54462beb5a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:00:36.812545348+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null && ls /home/ccuser/opsman-work/Jo[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b221644-a887-482f-a18f-f0d1eb08e4f8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:00:40.837005942+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing/ && echo \"---\" && ls /home/ccuser/opsma[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"18c5af3c-36bc-4fae-8359-b1933f7fd66d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:00:44.933828920+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ && echo \"---\" && ls /home/ccuser/opsman-work/d[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"34e99b8d-b95b-483a-9c35-078905d61de9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:00:50.402297551+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ && echo \"---ONGOING---\" && ls \"/[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6614fdc4-c804-483e-977d-0f3c44acc517","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:00:54.588673794+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a249f65c-dcd8-4258-8fd0-c09552b1e4bf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:01:00.387446216+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 187 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9fca27f7-697e-41af-be25-2890bd5d2337","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:01:06.302168010+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 186 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d57a9e52-5fbe-4419-8b6c-82322249b2aa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:01:10.989334626+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ && cat /home/ccuser/opsman-work/daily/2026-05[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"592a0e55-6850-4562-be22-fbe5a65ce772","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:01:15.781559854+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 43 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4459a250-810f-400b-97ea-8c76506aa02e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:03:25.460508782+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 root@opsman-01 \"hostname\" 2>&1 && ssh -i /ro[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9a9c1b6e-d6ca-446c-b45b-6a89313db70a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:03:34.759471293+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 root@opsman-01 \"[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a7762ed9-5c4f-49e2-9080-0e40cbde42fd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:03:36.132227465+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47a35cc0-fb1f-456b-b78d-cf75ea86b4b5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:06:07.728221637+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"tailscale status 2>&1 | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"af5dde7a-04bc-405d-8105-caa132cf5e5a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:06:09.080858331+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@100.108.20[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eaaf983a-251f-4783-8148-e61439a0e544","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:22:23.915871001+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"tailscale ssh mclou@laptop-cd8df7fs \"hostname\" 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df6b152a-6775-4c6e-880e-2dad59f277f8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:33:26.426091885+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f3078d7-4321-4a9c-9097-87a98295daac","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:39:37.760754881+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"grep -A3 \"laptop\\|LAPTOP\\|mclou\" /home/ccuser/rateright-growth/HQ-Vault/11_OpsMa[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ffb7d173-1293-40a3-bf23-428ac4c6154e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:40:32.034725556+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 188 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53ea1198-8001-4cdb-a21d-087ce3426b2e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:40:39.114955143+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 153 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91bdabfb-0ceb-4d22-9deb-98185d572eb1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:41:06.762706327+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 180 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8c79b81-f1ab-4607-83c3-2c428c9ef932","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:41:14.322720975+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef04f959-2244-4175-8e6e-5ed37d4b08f3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:41:26.720870336+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 141 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44ec1cd8-0933-4573-a2f6-319cadb3cbd2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:41:28.665984446+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 127 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3d93cb92-5520-4355-b9c3-2d7395e3b20c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:41:35.976589027+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 259 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fb246a03-1fad-44be-802f-150d9868cae5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:41:58.235664729+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat >> /home/ccuser/rateright-growth/HQ-Vault/01_Daily/2026-05-10.md << 'EOF'\n\n#[...redacted 812 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ffa3b3bc-2787-469f-83f4-a65f2aa775bd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:15.098460858+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"which claude 2>/dev/null && claude --version 2>&1 | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0d45a98c-1445-44d4-a532-4a0db262dd5a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:16.845418862+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 180 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9925483a-791b-4693-a9a0-79c951d8781a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:18.940691166+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/Operations/Jobs/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3439380-f294-4b40-9284-1eabd86e3c1a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:27.438280511+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"grep -ri \"airey\\|airy\" /home/ccuser/rateright-growth/HQ-Vault/ 2>/dev/null | hea[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe1c0e26-ec1f-4165-9390-e4884266121d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:30.356208405+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Jobs/ 2>/dev/null | hea[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1bdb4dd-c902-429e-90bd-c8772c41b9ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:38.182720871+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault -type d -iname \"*2627*\" -o -type d -[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4172ce89-04db-4ffb-9424-40f0639b81bb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:39.531102315+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 213 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d19afa2a-8610-48e9-ac3a-5d27eebd6bd2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:46.895010094+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Up[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b5952e92-1c81-4321-9059-0bb987db7df5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:48.187907694+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Upcom[...redacted 86 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fd000264-1a30-4130-b618-2467c73a016d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:56.302504322+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Upcomi[...redacted 86 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3dc72d4b-38f1-449a-abf9-aeea5e6884ee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:46:57.676753488+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 202 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21083c44-b10a-4561-8289-ce17b29cd301","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:47:07.034559776+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Upcomi[...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"28e68069-1bb9-42a1-a08a-eca8e33a8ce3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:47:08.401005531+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 231 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4e5fc0ef-8685-4552-a074-08159ca1cfb2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:47:19.940923588+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Upcom[...redacted 167 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d13570e-812a-4dfa-bdf0-983c92168fab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:47:21.280619030+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 235 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ce503b9a-70ad-4edc-8702-e12ec407d344","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:50:30.578071840+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/profiles/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4a3c27d-16cc-40d7-8bee-8701f9a7cb1d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:50:31.893981897+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/config.yaml 2>/dev/null | grep -A5 \"profiles\\|lfo\\|lfp\" | head[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2dc422c5-107d-4254-910d-d0ed9635dbd8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:50:42.649326557+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 135 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3029a2ab-c413-40e9-8cce-5586f8bdd0f2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:53:05.077506288+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 145 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"061f5a7a-e2f7-419d-b666-a949e8b9bad0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:53:11.628646457+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 99 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"018f85b8-24dc-4173-85ab-d09094632c25","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:53:17.135632509+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 131 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"752fd138-c7b5-419e-b75c-93ba8deadc3f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:53:31.692282207+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 89 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7a6bfa3-bba8-485d-938c-6cf7c2cc319a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:53:33.662056482+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9abf4254-0b47-42d8-b405-f246c9ec2813","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:53:45.167367533+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 114 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99bc2478-9c84-4848-9257-3b7af2767ebb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:54:01.765867668+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 146 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53b3e023-a3ab-4792-8f8c-d833fdc7fd74","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:54:03.959067470+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 194 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"698ad951-1e8c-4bdf-8081-70c1bc08fecf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T07:59:57.034628125+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"gws auth --help 2>&1 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"57ef7cc9-40e3-46e8-ba48-3ae36e6e3c81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:00:02.839752322+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"gws auth status 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64afa784-4541-4b03-b71d-bfd38bd12540","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:00:15.034214748+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"gws auth login --help 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6aaa3b51-0fec-4726-b0ef-853309cd6b97","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:00:29.921909179+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"gws auth login --services drive,gmail 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2a6676c2-5620-4619-9ab4-3af1a378f5fe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:09:52.360900762+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 100 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0d26e2db-583a-4606-a622-d292f3cc3f13","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:10:06.877590306+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 749 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69dffde2-3d16-48f9-8407-a7dd7485eb9c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:10:16.749988300+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 96 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a17c1769-5a6e-43f6-b726-5791f8579fbd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:10:29.001484168+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 208 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f41b6775-c712-4917-87d4-8c3e7d84320e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:10:52.102986781+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 277 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"adbd678a-0ad3-437e-83d9-bd70cc1f26f7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:10:54.048111898+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 206 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9fd3069a-9a52-49b3-9bb4-877e819243ab","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:11:02.984450211+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bef06fb7-d0e0-4393-9b4f-f08303fccbec","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:11:13.429235587+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 171 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91378742-363b-4fa1-b4ab-a42700f06504","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:11:28.037268683+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 171 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b969f3fb-392a-439c-bb9c-57d9d2fc1f25","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:12:02.873168661+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 2245 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f854dcb-0436-4c18-9028-f74e752f717c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:12:10.368949684+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 135 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a75dece2-694a-42ed-b3a3-c567be47efaf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:12:30.170114618+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -o StrictHostKeyChecking=no -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8[...redacted 787 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"45727d7c-4fee-4ef3-9518-72aecd864d84","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:13:02.784124516+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Upcom[...redacted 150 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cda758ca-387e-421f-908a-b39207cf9543","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:13:04.177189087+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Upcom[...redacted 162 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9af01f7d-2e12-45af-ac4e-b54154c67223","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:27:32.733239709+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"Get-ChildItem -Path C[...redacted 181 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3664f76f-062b-488a-a2eb-5f3516534a96","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:27:45.836013132+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"dir /s /b C:\\\\Users\\\\[...redacted 115 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5cf0cf79-abec-4fb5-bd9a-a9982da7f7e7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:27:57.933721068+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"type C:\\\\Users\\\\mclou[...redacted 246 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"45bca398-f214-4cc3-8d26-09e5142e5816","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:28:09.327794657+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"Get-Content -Path 'C:[...redacted 254 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"02f73cd7-2d0a-441b-ad06-c6accca8b50c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:28:18.752675697+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 278 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"78d6c6be-75c1-4d32-b250-c671ae83f021","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:02.141301603+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"dir /s /b C:\\\\Users\\\\[...redacted 111 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"596f1598-f6fb-47c2-bf5c-db00235a5e55","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:07.900586694+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 152 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"930bf7eb-54c7-42f2-a504-8c6459d40b91","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:13.701366203+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir C:\\\\Users\\[...redacted 99 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"491af004-f662-4097-a741-346979d1a7cc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:22.449948628+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir C:\\\\Users\\[...redacted 88 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"362aca07-ae61-476c-9bc9-b98590e61c50","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:27.538057581+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir C:\\\\Users\\[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"41c2e789-3753-479b-94dc-33e4b138cf92","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:34.222320362+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 185 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4737097-8cee-4058-b39a-73935f51b116","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:45.764449637+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c findstr /s /i [...redacted 151 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b9c2990-0bf8-4a22-9d55-827bd3108aab","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:57:54.520178735+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 176 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec5df2d1-0987-4bad-881a-cad7f9430b33","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:58:04.602950352+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 185 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"87447421-4114-4e21-8ea7-3de5f803e3a9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:58:06.543612784+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 267 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"993e6f37-5594-4f48-a96a-28e1fa52f15b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:58:18.248967909+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 187 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9a0eecb6-162c-4468-85c7-a3729e24de6e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:58:20.205021596+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 200 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f7e0921-eba9-4f55-8c32-95045ab1abb1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:58:33.536735548+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 276 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7a62f8f2-ee6c-4691-b049-6e4b00d63e10","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:58:35.668459984+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 276 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad6d0ce1-dcea-4adb-b9b1-e0efcafac4c4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:58:57.119654450+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 231 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b404e3e-2b00-4ad0-b13d-5d1d17ec4c2e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:59:18.313000674+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 226 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fef3ec9-6528-4e02-baf6-ada1a65f31ff","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:59:29.890805271+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 266 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f72c0d36-be5c-4481-bb41-fab0e779ee3e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:59:31.843547985+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"752096db-cadc-409c-8891-69e540b6ff0b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:59:43.008786497+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 188 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"22f373bf-145a-4fe5-aacf-da0165b73a55","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T08:59:53.435366854+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 188 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f66d5121-d04b-467c-bddd-a89c79836fa9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:04.938329249+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 101 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dff8f658-8f2a-4e43-9e99-6ce10d6aa593","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:07.370122807+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 173 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"780563ad-add9-45cc-9955-bb55e9f866ff","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:21.569175183+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 190 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2884a2a-3265-4241-929b-db26cf7575eb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:23.649458848+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6fb7424e-3400-42bd-b5bd-4df44dfc03bb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:38.214277874+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 168 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"85787c33-6d61-4c6e-b2cd-d6fdf15dd4e6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:40.230300533+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 165 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99aed730-8667-4f6b-a297-d5e5dd573734","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:52.966043264+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir /b C:\\\\Use[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b1661bab-4276-427d-8a41-9a2cf2013937","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:00:54.714939704+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 149 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f75a87c-5440-4344-9428-c0bea67ce927","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:01:06.169991914+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 180 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35caac6c-9b27-4c3f-a9ad-445d6b21276e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:01:27.433186197+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 178 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dec44253-c300-4ef1-b6f8-2d7180341ba2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:01:29.389615305+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 138 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee2a6aef-2057-4347-a4e9-5c065ea09267","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:01:38.458160224+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir /b C:\\\\Use[...redacted 101 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17800a68-225f-4ec3-8cd2-b2616aab7e52","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:01:40.208222652+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 209 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3a57701-e8ed-48b0-a666-43da7906ac1f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:01:55.115423254+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 196 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee0e5c5d-5ca9-4139-9912-1120e303fd23","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:01:57.051346477+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 193 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"338e8a69-808d-446d-91ef-ed7777cea7d5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:13:32.008270028+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"grep -i \"address\\|site\\|location\" \"/home/ccuser/rateright-growth/HQ-Vault/11_Ops[...redacted 114 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f9e0dc9a-263d-4f0c-971b-11588bb18742","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:18:24.204654350+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/ABN/View?abrNumber=72631184237\" 2>/dev/null[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a2ae5ab0-8904-4d6f-8c09-b92bce265f1c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:18:52.828915099+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://www.abc.net.au/news/search?q=Mack+Civil+construction+NSW\" 2>/de[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5aa4591c-c9f5-4946-a504-e4a5d499ab41","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:19:08.434581464+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Results?SearchText=Mack+Civil\" 2>/de[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aba87b25-efec-48ca-9d5e-6a8aec123cc1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:19:18.800309150+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Results?SearchText=Mack+Civil+PTY+LT[...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3dea740-04c8-4d1a-8d97-4b356bea6e72","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:19:29.215322219+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/ABN/View?abrNumber=000000000\" 2>/dev/null |[...redacted 127 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c63b8cab-6039-4c8a-b2f0-ddc3a7d15867","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:20:10.504777485+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s -A \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\" \"https[...redacted 126 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad324688-85e5-48ef-a864-fd385edde23b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:20:12.190541341+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s -A \"Mozilla/5.0\" \"https://api.tendersearch.com.au/search?q=mack+civil&st[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"89cbeac6-1f49-4174-840b-61187c7b4408","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:20:33.282842048+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s -A \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,[...redacted 200 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b3d13552-f6f0-4c15-b425-f58d3b603e2d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:20:44.249107416+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 254 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d12e837-b90b-416d-8f80-e85a3dffb46a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:20:46.397153419+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 244 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"202d9cb2-1424-4001-81a5-97e2fbcc5b7d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:20:53.277149613+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"Mack Civil\" \"/home/ccuser/rateright-growth/HQ-Vault/\" 2>/dev/null | gre[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2008aa72-d4a7-4dad-a152-d356460841da","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:20:55.173084896+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"nihar\" \"/home/ccuser/rateright-growth/HQ-Vault/\" 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c5424a38-3d0c-470f-870d-316104f190bb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:21:06.914175190+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s -A \"Mozilla/5.0\" \"https://www.mackcivil.com.au\" 2>/dev/null | grep -i \"a[...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"293988a8-83d4-44ce-866e-f62e6fc1204b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:21:08.264327858+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s -A \"Mozilla/5.0\" \"https://www.mackcivil.com.au/contact\" 2>/dev/null | gr[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"068865fc-bd79-4fb6-8143-362c7819cf10","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:21:16.474914616+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s -A \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,[...redacted 167 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dc3554cf-cbde-44f3-accf-82757f61577a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:22:04.714862909+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/json/NameSearch.aspx?name=Mack%20Civil&stat[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"894e724d-7c58-47cd-97db-4f0e612dab95","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:22:12.783863787+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s -A \"Mozilla/5.0\" -X POST \"https://abr.business.gov.au/Search/Advanced\" -[...redacted 122 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ce14016-775f-48e5-b8ab-cb8547682ffc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:22:40.945870195+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Advanced?SearchParameters.EntityName[...redacted 96 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d7e775a7-e018-4e6f-9470-5b25c58cddf6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:22:53.747893904+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/ABN/View?abrNumber=72631184237\" 2>/dev/null[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"993e4cbf-80a5-4011-8315-793a7cf7f991","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:22:55.108329877+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 229 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fbb7904e-ace5-4fb4-bfef-8aa859e89338","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:23:13.839465390+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Results?SearchText=MACK+CIVIL+PTY+LT[...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aed7e9d5-7584-4a7d-a9fa-4f831a2f32fa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:23:27.309234853+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Results?SearchText=MACK+CIVIL+PTY+LT[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17cd55e7-f4e1-4fda-b565-2d05acdf44a5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:23:40.202303379+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://www.aus Tammy.com.au/search?q=Mack+Civil+PTY+LTD+NSW\" 2>/dev/nu[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b60ec393-b806-4585-bcde-13ff9b04f03b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:24:18.343084328+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.tenders.nsw.gov.au/panelapi/v1/search?q=mack%20civil\" -A \"M[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"604df3cd-6642-4731-8308-1b19269308ce","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:24:43.401297059+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Results?SearchText=MACK+CIVIL\" -A \"M[...redacted 158 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"823ad9c9-9e65-480c-8d20-2811abd70cb6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:24:55.194553463+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Results?SearchText=Mack+Civil+PTY+LT[...redacted 94 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7753e09-76e6-4d2b-bcda-1efbda0f5df7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T09:25:04.347698843+00:00","session_id":"a966a90c-0598-4fb2-a58e-e4679aed19ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://abr.business.gov.au/Search/Results?SearchText=MACK+CIVIL+PTY+LT[...redacted 254 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f5536e7-303f-4197-8166-6bf513fbf9f6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:39:36.725396123+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 215 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"051c7d5c-0abd-4b4e-b485-95e120dde72b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:42:06.766341453+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 200 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a88ca70-0f2d-40f3-8600-102520c1f216","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:44:20.679537378+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"powershell -Command \\[...redacted 101 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6372f31d-2c15-48c5-8c4f-90750bcf1776","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:46:46.944994709+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Ongoing[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"249df40e-9836-4351-84b0-8e9916af6415","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:46:58.108843359+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"grep -i \"winswell\\|digout\\|shower box\" /home/ccuser/rateright-growth/HQ-Vault/01[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8b17221-96f9-4a06-a184-1946c7ad3b1f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:47:05.465609665+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Ongoin[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64c80846-6371-460e-8b3f-5657039cebf8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T10:47:06.827690139+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir C:\\\\Users\\[...redacted 102 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c70c12d4-b5a3-4a96-8dc2-9768f022904c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:09:08.938692006+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=agent+dashboard+observabil[...redacted 86 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81a4a57a-d3e4-4890-b601-bfbaa49b04d8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:09:48.808329126+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://api.github.com/repos/ericonaldo/AgentMonitor\" 2>/dev/null | gre[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ae197b2c-d4c6-4bd7-844c-c6d5a5984c83","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:09:59.111292693+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/illegalstudio/lazyagent\" 2>/dev/null | pyt[...redacted 110 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"297a58c4-93f1-4dd5-ac6e-2588517669c8","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:10:31.213465520+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/antryu2b/_y\" 2>/dev/null | python3 -c \"imp[...redacted 85 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"41f63975-e213-472b-8755-2275b10559e3","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:16:55.751001736+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=aion+agent+dashboard&sort=[...redacted 220 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2c9c67e8-aad1-4445-ace5-b47a593268d4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:17:29.316812566+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=aion+ui+agent+observabilit[...redacted 226 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b475d16-d7de-4321-9f06-20c9d803e8c8","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:18:49.446527506+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=aion-ai&sort=stars&order=d[...redacted 195 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"085a043d-3e28-4d9e-83f5-bc58c94a9793","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:19:01.334892645+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=aion+open+source+agent&sor[...redacted 210 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"39ed8d76-cb36-4e44-bec4-254173afc9a1","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:19:31.360970853+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://raw.githubusercontent.com/iOfficeAI/AionUi/main/README.md\" 2>/d[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8190f86f-cf33-49a0-a40c-7531609e469e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:19:35.932493865+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://raw.githubusercontent.com/iOfficeAI/AionUi/refs/heads/main/READ[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"65f2f1d0-7dc2-4262-9f0b-7bb84f16ebcf","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:19:42.242651126+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/iOfficeAI/AionUi/readme\" 2>/dev/null | pyt[...redacted 91 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5dd8c180-4091-4ac6-b2fc-c4ff178d9496","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:19:57.000221664+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://raw.githubusercontent.com/iOfficeAI/AionUi/main/readme.md\" 2>/d[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a0884a37-4482-43e6-acbd-5c84c9ec5ac8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:25:09.287561435+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/iOfficeAI/AionUi\" 2>/dev/null | python3 -c[...redacted 95 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c24c82ea-e7ea-4d06-978e-c1d591011038","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:29:33.453628168+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=paperclip+agent+ai&sort=st[...redacted 217 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"15957e8b-a6b2-40ff-8cb1-4f3d56ce78b7","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:30:02.553044785+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=paperclip+ NousResearch&so[...redacted 210 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7674040a-ee21-4c4c-a561-8766594d0c73","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:32:23.885411040+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=NousResearch+paperclip&sor[...redacted 209 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b1356de5-6288-4059-b218-0ee03d75b93d","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:32:25.635484048+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/runtimenoteslabs/gladiator\" 2>/dev/null | [...redacted 146 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48525f12-81ba-48d0-850c-b826ff16c30e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:32:41.300963385+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/NousResearch/hermes-paperclip-adapter\" 2>/[...redacted 145 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c980d24f-bd6b-43ac-9f12-9e736e2dee0f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:32:53.224313544+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/search/repositories?q=paperclipai/paperclip&sort[...redacted 208 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b438369b-7335-44a7-a977-fb7cb19400a3","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-10T11:32:54.964631857+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://raw.githubusercontent.com/NousResearch/hermes-paperclip-adapter[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"889b4537-3c7f-4c68-a6b5-4b1cad3ed503","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:38:14.490656477+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.clawdbot*/ 2>/dev/null; ls ~/.clawdbot*/ 2>/dev/null; ls ~/.openclaw/ [...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ebeea4f6-f130-47ab-977f-cd496e2c8f03","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:42:41.792119144+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.clawdbot-susan/identity/ 2>/dev/null; ls /root/.clawdbot-herald/identi[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"461974fa-3c3d-45c0-b8da-079b90e41552","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:42:53.196429935+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.clawdbot-susan/agents/ 2>/dev/null; ls /root/.clawdbot-herald/agents/ [...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f15b0846-a7ca-4c73-8555-d77c6b52eb22","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T11:43:13.675040855+00:00","session_id":"832067c2-89fe-43ca-a157-491a8ec91d6f","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.clawdbot-susan/agents/main/ 2>/dev/null; ls /root/.clawdbot-herald/age[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"994d0f1a-0d43-4dea-b11e-03cf53259e73","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:01:04.336525864+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Ongoing[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d08ae7f3-b808-4220-8bb1-41a931f36757","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:01:08.771661885+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/ 2>[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bcbb2ea3-4cd8-4a20-8c61-d18ffbea5413","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:49:35.978221119+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ 2>/dev/null && ls /home/ccuser/opsman-work/Job[...redacted 86 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4e407be5-0e5e-449c-a139-21967101206a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:49:39.253486563+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"83542b88-80e1-456f-ab77-10b8e73c55c4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:49:47.569959356+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls /mnt/ 2>/dev/null || ls /mnt/*/ 2>/dev/null; find /home/ccuser -maxdepth 4 -t[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"32c0ec3c-2c21-4b01-a6d7-a70acf4e3e84","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:49:57.990265798+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"13b4b436-7a1c-4648-b594-89fb942298d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:50:04.993919737+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/01_Daily/ | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2f400184-4a51-43bd-b49d-e2593ced07f2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:50:21.730804586+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Completed Jobs/\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a246597-ee2c-4643-8b14-7cae90384676","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:50:32.003092955+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null && echo \"---\" && ls [...redacted 130 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"686a8f4b-f4c5-4376-9585-b92449640ef3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:50:47.167458054+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/01_Daily/\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bff0992b-6fbe-4d81-8fd3-4bca801dbda8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T20:50:57.816387743+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS -name \"*.md\" | xargs [...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e8727e71-d539-4d74-9a9f-0b3dc5dae99e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T22:55:56.919124981+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault -type d -iname \"*liverpool*\" 2>/dev/[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f709df5a-4a23-461d-aee6-b8604b8bdc6d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-10T23:55:39.826679906+00:00","session_id":"05c7e248-8652-4082-bca0-8c98744e9edf","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"dir /r C:\\Users\\mclou[...redacted 110 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9e48bc1-6a4b-4954-b71d-2eed3284e61f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:28:41.898898161+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --check 2[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"51125dff-102c-4121-8bed-30f003f7c7d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:43:01.517698059+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --client-[...redacted 91 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1f9b6ce-4e6d-44b1-8856-8248a8d78535","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:43:10.565150351+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --auth-ur[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d35ca076-d21b-4e5e-9bef-c5a92642aa1d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:43:20.586299045+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --help 2>[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"019f79f7-db6e-4a86-a704-24aea68a4276","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:43:33.402779473+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --client-[...redacted 51 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3022d939-2938-45b7-87e5-2d06a0c9d5ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:43:57.071231691+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --auth-ur[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b4c793f2-8d2f-4aa7-877d-d2ee7ef0515f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:46:46.225457482+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --auth-co[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"22ba2fa9-05cb-478f-9d7f-5a542303a1ef","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:46:53.423505013+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"python ~/.hermes/skills/productivity/google-workspace/scripts/setup.py --check 2[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b27cf2de-6ee6-44aa-972f-1460aa5f177d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:47:01.708008778+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"GAPI=\"python ~/.hermes/skills/productivity/google-workspace/scripts/google_api.p[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b10e1cd7-8643-4a0b-be5b-79781dc130bd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:47:07.533474531+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"GAPI=\"python /root/.hermes/skills/productivity/google-workspace/scripts/google_a[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab8fce06-881d-4c21-a760-10a310aa5dee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:59:25.602103616+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/google_a[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f3ca3d0f-b375-49da-ab3a-70c8c72e0bd7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T08:59:53.948542288+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/google_a[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47844ec2-9aec-4b1b-8b96-495df74395cb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T09:00:17.624448451+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.hermes/google_token.json 2>/dev/null | python3 -c \"import json,sys; d[...redacted 139 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c50760d5-6967-4271-987c-e9dbddb12f60","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-05-11T09:09:55.330197562+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/setup.py[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc542374-eff8-4227-b45e-51d626e5a8e4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T09:10:04.037346579+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/setup.py[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"561b5df7-4477-4312-88c2-bff83277a18a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T09:16:15.688709223+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/setup.py[...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2909e022-a898-45f6-87fd-fb4962e86c9e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T09:17:28.513684702+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/google_a[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d165afb-ba8b-4819-8bcf-50c2ce2384ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T10:01:16.940509452+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/google_token.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b3a2a4ae-d659-4166-aec4-d12a7b2bdec1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T10:02:11.720150158+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 587 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"95dd3ee1-1cf7-4a47-8280-f94877e94fac","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T10:07:52.281945508+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52618059-63dc-485e-aaae-824c0167f7e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T10:12:16.905854097+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cp /root/.hermes/image_cache/img_76e1f056db60.jpg /home/ccuser/opsman-work/daily[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f87133ed-6a81-4a95-9abf-23f4ed242ed5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T10:15:35.965900775+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cp /root/.hermes/image_cache/img_7bc5bb80c57c.jpg /root/.hermes/image_cache/img_[...redacted 561 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c507e64-000c-459c-bf81-e3031b432ad3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T10:29:34.673213535+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 564 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"449a3df0-9186-4533-8527-51714c59f1ae","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T10:30:01.897743653+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/setup.py[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e73445a9-138e-4fde-8262-bad021077a9d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:02:08.870469311+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/setup.py[...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8aa8f88a-50aa-41c7-b30e-d8c5d411c5d2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:02:21.915363798+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 509 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"519432b0-4aae-4bb9-a3b0-9d1a5db4f3aa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:11:47.122271099+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/setup.py[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d6888e6-aca8-4244-ab88-ece6e563b889","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:13:25.882183456+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/setup.py[...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23951d10-88b2-475c-a34c-2f751383a453","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:13:37.036273669+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 505 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"86e6c884-ff0b-4668-8eaa-a50e6d0449f3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:14:11.820828561+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Warn","rule_ids":["variation_selector"],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 3480 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9a623d0f-356b-4d1a-84eb-d0d5e72074df","tier_reached":3,"entry_type":"verdict","raw_action":"Warn","raw_rule_ids":["variation_selector"]}
{"timestamp":"2026-05-11T11:14:46.343020971+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python skills/productivity/google-workspace/scripts/google_a[...redacted 921 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7202546c-2239-40f9-917e-f49a572203c1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:15:04.601111101+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 1441 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f49b9c4d-54d0-4bad-9f57-0d958be2788a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:16:14.813700796+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 994 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4578ce54-145a-4a92-a527-a4faf1f6ba98","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:17:28.454912569+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 2691 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf9bb70b-6f36-4fd4-8d52-4f4df3e435ca","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:17:48.309255023+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 825 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c46ad97b-58d0-4481-977d-c4c80af6def5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:19:24.410764017+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python -c \"\nfrom googleapiclient.discovery import build\nfrom[...redacted 739 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed61fbd6-576e-4605-b58e-0f2931c38c37","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:19:35.331657397+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python3 -c \"; from googleapiclient.discovery import build; f[...redacted 724 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3881ba28-fcbe-45a2-abbe-d42c30102ba4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:20:08.781116147+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python embed_photos.py 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ab3b205-06f6-483f-87b9-60dfd59e3e6a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:24:52.586042660+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python embed_photos.py 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f6da136-db14-41d2-bdb8-27c2ca7d368e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:27:24.898959464+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && pip show google-api-python-client 2>&1 | head -3; python3 -c[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99c595f9-8291-4dc5-8497-7961190adee2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T11:27:43.490433907+00:00","session_id":"51625e0f-73e2-4272-9364-9842fc8994b6","action":"Allow","rule_ids":[],"command_redacted":"cd /root/.hermes && python3 -c \"\nfrom googleapiclient.discovery import build\nfro[...redacted 309 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1dc6d1fc-dd6c-471c-b002-0b8947223dfb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:47:21.096762060+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"gh search repos aion ui --limit 10 2>/dev/null || echo \"checking directly\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"04e9b7be-2865-4900-8d66-044be4152586","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:47:26.976905741+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"gh repo view iOfficeAI/AionUi --json name,description,url,defaultBranchRef --qui[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a3bdf4b-6769-4ddd-9a1f-00d81e7e2c31","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:47:31.053629313+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s \"https://api.github.com/repos/iOfficeAI/AionUi\" | python3 -c \"import sys[...redacted 201 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"46deb8f0-2078-469a-b37e-2050927278a2","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-11T19:47:35.841919361+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request\nreq = urllib.request.Request('https://raw.git[...redacted 178 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53dd56d5-11d5-4862-a414-3188da681d88","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:47:40.153854579+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json\nreq = urllib.request.Request('https://a[...redacted 305 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe124701-e2a7-4de0-a45f-a188a66a2ee0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:47:44.837742784+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json, base64\nreq = urllib.request.Request('h[...redacted 371 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c821cf3a-7a23-48fa-9f6e-1155ef4e03eb","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:47:51.643594921+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json, base64, re\nreq = urllib.request.Reques[...redacted 435 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e6337ec0-baf8-4c8b-b633-fbac9945a016","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:47:59.801159889+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json\nreq = urllib.request.Request('https://a[...redacted 405 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35313675-fb19-430f-bf4a-3e203f757743","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:48:08.439174561+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json\nreq = urllib.request.Request('https://a[...redacted 350 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99058f02-b4e7-4f6e-b82e-3b188220c1e9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:48:19.815318940+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"uname -m && uname -s [...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6ab6dbf2-2ffc-4d6d-9e54-6339e0c70a12","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:48:24.406991533+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c ver 2>&1\" 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df91ca44-a8bc-4844-948a-032846098f6f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:48:29.483236524+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"curl -L -o /tmp/AionUi-1.9.25-win-x64.exe \"https://github.com/iOfficeAI/AionUi/r[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b6f23be6-7adb-4b8c-9e6f-1753939cc08f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:48:44.726883183+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ls -lh /tmp/AionUi-1.9.25-win-x64.exe","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc476b2e-fa31-43be-9d36-5ce0d189c6eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:48:49.029411117+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"scp -i /root/.ssh/id_hermes_ed25519 /tmp/AionUi-1.9.25-win-x64.exe mclou@laptop-[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"528eb7ab-8c72-4625-a396-0cd822ddbba1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:49:14.442707972+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir C:\\\\Users\\[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"418c674a-f0ac-456d-a984-d074f83db06a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:49:20.204625020+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c start /wait C:[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a06b863-bb93-4bf8-b53a-0728ebe0bdff","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:50:13.649696058+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs \"cmd /c dir \\\"C:\\\\Prog[...redacted 354 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"93c2db49-ee2c-4f96-8c15-321178dd7066","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:51:03.070843233+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs 'tasklist /FI \"IMAGENA[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9e1cf924-6656-4c28-bc15-acaf688db24a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:51:12.583951327+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs 'dir C:\\Users\\mclou\\Ap[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1d2d271-4b29-46ff-aa4c-ad12cc59270e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:51:43.949063571+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs 'powershell -Command \"[...redacted 149 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"082ac9ce-f19d-43d1-a5e1-7b21787625a2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:51:49.652465072+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs 'powershell -Command \"[...redacted 132 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cbe87fcd-af22-47cc-bd42-6082279e2487","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T19:51:54.851370460+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs 'powershell -Command \"[...redacted 140 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e85f9c40-7b22-4139-9b16-6b3eb9032d92","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:00:59.720061422+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ 2>/dev/null || echo \"NOT FOUND\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d90bbc5-ebc8-4169-a63b-3fcebf768bc4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:01:04.197772048+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\" && echo \"---\" && ls \"/home/ccus[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fafec64b-4485-4b1d-bf81-15170c2870ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:01:09.010937844+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4ea4daa-3aa0-4d3d-b3ea-5a4f2468c3c8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:01:10.369849594+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara Go[...redacted 70 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"db4e92bd-a34d-4c42-bf76-0dd4a4489769","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:01:16.687842052+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"TODAY=\"2026-05-12\"; JOB=\"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HP[...redacted 613 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3fc3c57c-f0fd-4662-b8ab-64e70005867e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:01:20.764395751+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"430cba45-a5cf-48a5-89d5-07b60f4f7ed7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:01:26.939721508+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"JOB=\"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 91 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f67ef0bb-e116-4692-b964-f8fcce6e2931","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:01:33.639337952+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"JOB=\"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara G[...redacted 378 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d4743cb-df08-4d40-a6d3-708b4fe55b0b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:05:25.141996989+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json, base64\nreq = urllib.request.Request('h[...redacted 357 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"812e6416-06d0-4fc7-bf8a-97c31319ddf7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:05:37.263194837+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json, base64\n# Get all wiki pages\nreq = urll[...redacted 293 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b689daa-98a2-43c6-a615-6d175b133fc7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-11T20:05:45.395336914+00:00","session_id":"292780fa-478b-47f6-9b0b-1248a6cdff4c","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json, base64\n# Get sidebar/overview from wik[...redacted 350 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17381146-65ac-499a-9041-bc7686bebf4b","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:26:46.577198365+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null | tail -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d62c1c47-8b6c-43f1-a5b1-bc02f7cb48f4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:26:51.425402254+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | grep -E \"^202\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1788c1c-36a9-4fd0-9acf-222b622bfee3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:26:55.717997718+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | grep \"2026-05-12\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8cc18b9f-9f99-49e0-a822-62c371b1f5c1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:27:16.845683387+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"cp /root/.hermes/image_cache/img_47cee8a61255.jpg /home/ccuser/opsman-work/daily[...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"61e24457-ea93-4095-89f7-42d20b5627a1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:28:12.992281853+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"cp /root/.hermes/image_cache/img_61651dc5dfb8.jpg /home/ccuser/opsman-work/daily[...redacted 153 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bbe6598-527e-44ac-a9c4-246cd90a4888","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:29:54.128487811+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"cp /root/.hermes/image_cache/img_bc7976e10e57.jpg /home/ccuser/opsman-work/daily[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d0bb3e12-7323-42f6-988a-1f835e8f9c3e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:32:16.777602230+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"for img in img_7cdc699fade7 img_e78fbc993cc3 img_b50cfff4ec5e img_1c6a9763a8cd i[...redacted 180 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3886813a-a73f-4b35-ac28-f66761e1bb71","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:33:25.748455140+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"cp /root/.hermes/image_cache/img_f62f6a1bb308.jpg /home/ccuser/opsman-work/daily[...redacted 264 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f7786963-213d-454f-998a-cd9d235e173e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:42:45.069589291+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"himalaya account list 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9fd3ecc5-54b3-4ef1-80f2-ded12f7182de","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:42:49.642112463+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -sSL https://raw.githubusercontent.com/pimalaya/himalaya/master/install.sh [...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3cd59f2b-bedc-492c-875c-8d0313d2bf11","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-05-12T05:42:56.919048298+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.config/himalaya/config.toml 2>/dev/null || echo \"no config found\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"55fca3bd-ce77-4baf-a08d-eefeef02d51d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:45:00.200046193+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.config/himalaya/ 2>/dev/null && cat ~/.config/himalaya/config.toml 2>/dev/[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"008a25f8-52ac-4b53-8f3f-0a8cb40b7f09","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:45:17.900674220+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 /root/.hermes/skills/productivity/google-workspace/scripts/gws.py --help[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00a2e47f-c3c3-4b95-a121-93f3e84d6dab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:45:24.712989095+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"find /root/.hermes/skills/productivity/google-workspace -type f 2>/dev/null | he[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"252d4e21-47a5-4068-96fe-6f3d70681918","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:45:34.495300461+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/ | grep google","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"35208aad-ddd8-4035-9699-50fe7e802243","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:45:46.570911885+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\ncreds = json.load(open('/root/.hermes/google_token.json[...redacted 116 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9bf1d8c7-991b-4769-8584-967f89a23a2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:46:03.317580193+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json, urllib.request\ncreds = json.load(open('/root/.hermes/g[...redacted 215 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b9cb9c82-e4a4-4c14-8944-0389cf41d69e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:46:09.978559312+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\ncreds = json.load(open('/root/.hermes/google_token.json[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"51de798d-9072-4cee-a37d-2d4f40004a7e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:46:17.394564640+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 /root/.hermes/skills/productivity/google-workspace/scripts/google_api.py[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff873ede-1192-4da8-94bb-8421f8255b32","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:46:24.427229328+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 /root/.hermes/skills/productivity/google-workspace/scripts/setup.py --au[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aa3b99f6-e01f-48e4-97e6-746beadca2d7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:51:08.952202427+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 271 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f8309636-a5ce-4bd4-a33b-d1be919ad345","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:51:18.449326686+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 537 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dfb8592a-d0dc-4b30-8bf6-8b8fa9cfbafa","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:51:43.748461781+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 597 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb436edc-1163-4bd5-b5d6-a339a758dfcd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:51:55.035762551+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 697 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4de38bb5-2857-44a4-9abf-8bbaac2dc317","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:52:05.587945770+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 637 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef2245c8-7efa-441f-ad7a-252d38eedb64","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:52:19.411199597+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 684 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50d8446a-5f48-4321-87b2-c01f5f7bd735","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:52:30.710005180+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 679 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"328c702e-41e4-46e8-b60e-fd1e0564116d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:52:47.904602627+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 835 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6d82b51c-8bff-4b24-9005-c6eb2059433a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:53:11.502311735+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 1274 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"42b8776c-63c6-43fb-b630-171e3cbd14fd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:53:38.750970454+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 1333 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"13816504-3d4a-40a0-b11b-5bc5ec4bd81c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T05:53:58.568983441+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 834 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b57b2219-ca37-460a-b487-05b285936b6a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T06:46:37.777742988+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 701 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26b29341-749f-48ed-9234-e562e47de856","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T06:47:06.150366180+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 1355 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"185f02f8-1625-40b3-b3d4-f247a2c74bc9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T06:47:26.463643085+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 988 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e251bece-3a08-4a47-aeef-885ecc434137","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T06:49:20.052448472+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nfrom google.oauth2.credentials import Credentials\nfrom google.auth.[...redacted 738 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b0c67239-f072-4836-a110-09f1928edcfd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T06:50:30.912318391+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'EOF'\nfrom google.oauth2.credentials import Credentials\nfrom google.a[...redacted 2083 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c97ae10f-30d7-4286-8e17-76721a37f2f3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T06:56:25.611247286+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nfrom google.oauth2.credentials import Credentials\nfrom google[...redacted 2447 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad8b46bc-f989-418f-9e8f-3fe229697ed3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:00:31.837445743+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/ 2>/dev/null && find /home/ccuser/opsman-work -name [...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aa994c18-c276-4436-9eaa-13cfddaa2d78","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:00:46.655858207+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8900d7cc-1794-4899-8f44-d1d12663878a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:00:53.344665138+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs\" -name \"07a*\" -type d 2>/dev/null; find \"/ho[...redacted 178 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48f10e5b-bae0-4a4e-8c33-0ceaaa2f4bf3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:01:01.877986230+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 218 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7088f985-b5c5-4b41-99ae-e1f305173ec3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:01:34.302739505+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"date; ls \"/home/ccuser/opsman-work/daily/\" 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c350fdca-2c47-41dc-9b19-82df71aaaa31","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:01:45.876354793+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"head -80 /root/.hermes/skills/productivity/google-workspace/scripts/gws_bridge.p[...redacted 1 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"27c845bd-831a-4293-a72e-ef321e94cb3a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:01:53.732001174+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 372 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ceff86e7-e14c-4b58-8967-38939b3d3723","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:02:06.191339671+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a848a0b3-4f2d-4638-b619-2d3ff9c47a3b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:02:17.503114583+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 << 'PYEOF'\nfrom google.oauth2.credentials import Credentials\nfrom google[...redacted 1501 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fdc97ad4-45f9-489a-92a1-f3f9f1ba6c2e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:02:19.007335187+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs\" -name \"*.md\" -newer \"/home/ccuser/opsman-wo[...redacted 118 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b19e251-fa5c-403a-bd91-eb82294a9362","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:07:47.497410712+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"print('hello')\" 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74cfe8ca-5080-40ff-a584-32b22c40f0c3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T07:08:41.282431887+00:00","session_id":"4ecc564e-4d64-487c-9046-7c8d19875066","action":"Allow","rule_ids":[],"command_redacted":"timeout 20 python3 /tmp/fwd_emails.py 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f4eaeb66-2a82-457f-9ea6-241b4077a010","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T09:48:54.548022482+00:00","session_id":"604adcc3-f7bf-4e0a-962c-8bd0928ac78a","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs 'tasklist /FI \"IMAGENA[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"31dfc704-940e-4e3d-ba33-46cf95dd91f8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T09:49:09.223217647+00:00","session_id":"604adcc3-f7bf-4e0a-962c-8bd0928ac78a","action":"Allow","rule_ids":[],"command_redacted":"ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs 'powershell -Command \"[...redacted 106 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"18ee43b5-63d6-4cf8-a8b1-d75f6f273dda","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T20:57:56.400344570+00:00","session_id":"8580af05-3c26-48ef-ac48-6d86ef94b238","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ && echo \"---\" && ls /home/ccuser[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8496465e-5ad2-44d0-8f20-14319e892eff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T20:58:05.407817726+00:00","session_id":"8580af05-3c26-48ef-ac48-6d86ef94b238","action":"Allow","rule_ids":[],"command_redacted":"grep -ri \"bridge\" /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ --include=\"*.md\" [...redacted 105 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30805063-d9c8-479c-8100-dd31c5783033","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T20:58:09.474468570+00:00","session_id":"8580af05-3c26-48ef-ac48-6d86ef94b238","action":"Allow","rule_ids":[],"command_redacted":"grep -A3 -B3 \"bridge\" /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutio[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e6402887-81bd-4ddc-893d-25c19f2d8628","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T20:58:13.584943385+00:00","session_id":"8580af05-3c26-48ef-ac48-6d86ef94b238","action":"Allow","rule_ids":[],"command_redacted":"grep -i \"bridge\" /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutions\\ P[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"26ada174-f279-4920-8be9-a44b49f50c4c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-12T20:58:17.818698964+00:00","session_id":"8580af05-3c26-48ef-ac48-6d86ef94b238","action":"Allow","rule_ids":[],"command_redacted":"grep -i \"bridge\\|concrete\" /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ So[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3f0ffc86-69d6-451e-ba10-73d6ebc55d3a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T04:29:53.880222590+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutions\\ Plus\\ -\\ HPE\\ F[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a18665d9-7713-429e-97a2-243a8a024da5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T04:30:03.360350865+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutions\\ Plus\\ -\\ HPE\\ F[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe7dff91-bdad-4f6e-bdd1-c2abc640fa6e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:18.907939327+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/07d\\ Daily\\ Diary/ | tail -5 && echo \"---\" && ls /ho[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff54a0f0-5769-4c09-b803-2d0597daef19","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:29.111841653+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -type d -name \"*Hornsby*\" 2>/dev/null | head [...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3eec70b-8b75-4097-a689-acd9b25713ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:30.421618993+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -name \"*-Horn*\" -o -name \"*hormsby*\" 2>/dev/n[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ccddffb3-2ce9-4605-9ff4-eb2bfd437136","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:36.605348813+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"093762dc-e45c-404e-84b8-026091cc1e2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:38.098098936+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"107856d1-77fa-4763-9504-960e0cbf2f78","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:43.563052707+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"887c2004-54fb-416f-ba8d-bf9256f095b3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:45.006651765+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"265c3de6-aa5c-472d-aab0-f7b329dc65fe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:50.816506830+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"20052a34-95f7-4ca3-8c1e-558a97be504c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:58.524147017+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a2b48d9-54b5-494c-b84a-7dea26990f90","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:00:59.867589394+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f3baa9d-da91-4a3d-a98d-b0f811cd9d4f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:01:05.450857996+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b87d8f7e-d854-41e6-b6cf-db8c63cee310","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:01:12.991479449+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"88d68c5b-aaae-4dc9-b572-327641d8a3ad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:01:14.400494665+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"55c5643c-e498-4f41-be55-ff0efb070d25","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:01:33.867922567+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 206 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b24eef2b-8747-4180-bba1-88826b281780","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T07:01:43.584068889+00:00","session_id":"9fdd6cbf-3d46-4600-aea1-b12ff8cacf3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 204 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b357520c-5bc5-42da-82a7-39af6334574c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-13T22:01:09.019176280+00:00","session_id":"543fcdc5-f2db-4559-828a-98d4e7023f25","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"af2dd8a4-c8b1-4151-8807-66332b05483a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T07:00:43.446525132+00:00","session_id":"10c26502-ee9b-419c-9bbf-5cd0629e54af","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24002384-3733-493b-9a27-54102ef18a3e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T07:00:54.698402043+00:00","session_id":"10c26502-ee9b-419c-9bbf-5cd0629e54af","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -maxdepth 2 -name \"2026-05-14*\" -o -name \"*Ho[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4dbf76bc-a718-497e-af4d-90e826f8d390","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T07:01:02.345657367+00:00","session_id":"10c26502-ee9b-419c-9bbf-5cd0629e54af","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 171 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cce02708-e18a-4e15-80ba-c2313c7eecc6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T07:01:09.912586494+00:00","session_id":"10c26502-ee9b-419c-9bbf-5cd0629e54af","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01ec8672-1ea0-4834-b9ac-1f6fd4d59e1a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T07:01:20.019173335+00:00","session_id":"10c26502-ee9b-419c-9bbf-5cd0629e54af","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 257 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52bfbb9a-2f17-4ce2-85d9-37a914582e5b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T07:01:25.248396706+00:00","session_id":"10c26502-ee9b-419c-9bbf-5cd0629e54af","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b8b601b3-b2e0-4c2b-9fad-b95b7e387fd9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T07:01:30.192354011+00:00","session_id":"10c26502-ee9b-419c-9bbf-5cd0629e54af","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a7c67319-adcc-456d-84a3-7de1514d8164","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T20:01:01.907717523+00:00","session_id":"65720823-9557-43c0-a7ec-73d1dce3735f","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Ongoing[...redacted 131 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"165e4e07-a938-4f6b-9e64-d657867ebebe","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T20:01:05.954071961+00:00","session_id":"65720823-9557-43c0-a7ec-73d1dce3735f","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/ -name \"00-brief.md\" 2>/dev/null | h[...redacted 102 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"638629a5-7c75-43c0-958d-b4e51e8caef6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T20:01:10.813596083+00:00","session_id":"65720823-9557-43c0-a7ec-73d1dce3735f","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Upcom[...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0c9b5da9-8241-43c6-a5e2-fe107bed2355","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T20:01:15.740785005+00:00","session_id":"65720823-9557-43c0-a7ec-73d1dce3735f","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Ongoing[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4afc5e1e-1b32-442a-924e-b53dace44595","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T20:01:19.378901593+00:00","session_id":"65720823-9557-43c0-a7ec-73d1dce3735f","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/ -max[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b68ba36-dfe4-4d25-8fe0-f4d8ebeb0e64","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T20:01:26.748054074+00:00","session_id":"65720823-9557-43c0-a7ec-73d1dce3735f","action":"Allow","rule_ids":[],"command_redacted":"for dir in /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs[...redacted 159 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f88ce80e-3abe-42c3-9b1e-35bc8214b947","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-14T20:01:31.707685982+00:00","session_id":"65720823-9557-43c0-a7ec-73d1dce3735f","action":"Allow","rule_ids":[],"command_redacted":"for dir in /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs[...redacted 109 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d5a35f1b-eeef-4951-8fa2-ad3ce829a294","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:08:40.001620983+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/.archive/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a4d49c6-500a-4e39-bf2b-e2733679ab81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:09:30.396133298+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/productivity/hunt/ 2>/dev/null && ls /root/.hermes/skill[...redacted 43 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c2c2e1c6-9274-4659-9532-9f55d5dfb08f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:09:48.459966483+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/productivity/rateright-operations/references/ && cp /r[...redacted 145 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8ee5f77d-e7e8-4a3b-b3f4-e3ef0e4ec522","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:10:29.595453885+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"mv /root/.hermes/skills/productivity/hunt /root/.hermes/skills/.archive/hunt-202[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"204d36ef-ccaa-41de-8168-48f115b3fd96","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:11:33.510490670+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"mv /root/.hermes/skills/ops/foil-management /root/.hermes/skills/.archive/foil-m[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"abf561ba-d5b4-430d-b14f-21410c53f19a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:12:06.607836968+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/.archive/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"707a187a-7a51-4ebc-b252-21ab87ad32b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:12:16.975848333+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"for skill in ~/.hermes/skills/.archive/*/; do echo \"=== $(basename $skill) ===\";[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7f466b2b-9c59-49f6-884e-9d0ce864bf0b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:12:36.008115366+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/skills/.archive/lfcs-docket-check/SKILL.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6bff721e-f06f-4df4-891f-4c292d879f6a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:15:20.478136565+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/ops/chief-of-staff/references/ && cp /root/.hermes/ski[...redacted 149 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3582fb63-d336-47a8-bcaf-a85db6834dbd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:15:38.029641361+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/ops/chief-of-staff/scripts/ && cp /root/.hermes/skills[...redacted 136 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79b69467-42bf-45c1-908b-586a18ebfc77","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:15:47.495213697+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"for skill in lfcs-docket-check lfcs-eod-summary lfcs-job-tracker lfcs-pre-pour-c[...redacted 302 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4f0966f9-61a2-4468-87e4-0d095b35c3f5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:16:07.491601149+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/.archive/lfcs-client-correspondence/ 2>/dev/null && ls /[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4059bcc4-84a8-474d-a61a-8a095217621b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:16:22.990871957+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"mv /root/.hermes/skills/ops/lfcs-operations /root/.hermes/skills/.archive/lfcs-o[...redacted 331 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b97915e8-6f2d-4477-8262-41ad4222d773","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:16:31.705226298+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/productivity/rateright-operations/references/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f9571f0-e3b4-4f1a-a8a2-95be2b7750ea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:16:42.634453523+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"find /root/.hermes/skills/.archive/hunt-2026-05-15 -type f 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8200684a-25e8-4d5b-8f93-dda7cce77edd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:16:50.945578174+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"find /root/.hermes/skills/.archive/hunt-2026-05-15 -type f -name \"*.md\" 2>/dev/n[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16960484-a102-407a-94e4-bc3197860f2e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:16:58.503614332+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 3 -name \"SKILL.md\" | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad07d22e-4b3a-4ff6-bd7c-ed5975894007","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:17:25.442166208+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/skills/lfcs/SKILL.md 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91adf469-700e-4eb7-9147-c36086d4ae4b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:17:45.262362746+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/skills/lfcs/SKILL.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03ee6125-1b48-4c57-9dc2-68b357497dc3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:18:19.510632198+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/lfcs/references/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c6304f6-f9b4-4f9a-b290-e3063b6f32c1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:19:06.914181405+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/skills/ops/site-lookahead/SKILL.md | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e0e44575-bad5-420a-ab8b-5bed2dfd3999","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:20:12.167910489+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/skills/.archive/lfcs-operations-2026-05-15/SKILL.md | grep -n [...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c99ef03-38b4-40c7-8a0a-992f1c6c0d8c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-15T07:20:42.914739527+00:00","session_id":"f717bed3-d08d-47a0-beb8-afd8c5f16fc8","action":"Allow","rule_ids":[],"command_redacted":"ls /root/.hermes/skills/lfcs/scripts/ 2>/dev/null\nls /root/.hermes/skills/lfcs/t[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4be559e5-eb07-4201-af45-5765b527adb1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:00:57.209650794+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | sort | tail -5 && echo \"---\" && ls /home/cc[...redacted 153 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"96caa090-6565-4693-bd4e-e2c506f46d7a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:01:04.840569522+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -type d -name \"*Hornsby*\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"694352d9-0524-47c3-b356-0967c165942f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:01:10.122898395+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 213 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63b53384-b208-42ea-9686-ef28faa763c5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:01:15.304083049+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0fba158d-e6b9-4a45-9251-27c2fe1a886c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:01:20.587165327+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 186 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44d8e760-e638-4515-996e-82a5d8019257","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:01:26.129826259+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Fiel[...redacted 174 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0868b4bf-52eb-4fc2-bcfb-f451dbc4d28f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:01:36.297650968+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 562 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"10853b8f-c88e-4ead-95c8-05232eeb899b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T07:01:43.046347353+00:00","session_id":"da42f50f-318a-43af-b923-cea09dad0c5f","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field[...redacted 236 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c16a0777-fbb3-42d5-b12c-35bbbbd6a196","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:15.865643039+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c07dc8cf-0eef-49c4-9e75-0beba2c03189","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:19.912484137+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b4d226f6-abea-4be0-b733-0df8d52ae16b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:25.065966615+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"02c1b160-78bd-4506-862e-f69743c3a184","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:26.724350906+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara G[...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52c8adbc-e81b-47dd-ba89-630297483b9a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:28.280096491+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0f2ceea-b0bd-4d02-b0f3-5107325c8e45","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:35.981513462+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff727f99-0a1e-43f4-8022-be4f0b7c9472","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:37.279562669+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df8edfcf-12a5-4c7f-885e-e802f23e7ad5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:38.740346784+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 61 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a4831e63-4554-4cf1-98eb-57fe6c80ddcf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:40.174125838+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"65690171-d19a-4d20-b0b4-62475448f5cd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:45.061617322+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab73c01d-0146-4480-bfb4-6cef9f48097d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:46.573680953+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara Go[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f4d4005-85e2-4cbd-a615-62738db03eee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:51.841081138+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec7eebf8-6fa4-4c23-822f-94063fc9eb5d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:53.289710747+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21d3c195-b8ad-49e1-8350-af5c27c48c5e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:58.165724411+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"96090782-19cc-4d57-ab32-2e7689b11cff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:00:59.555907012+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f66f3032-55a0-4743-abc8-62a786e3e154","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:01:04.344212070+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d6e2b540-57ed-4f42-b52d-20033aa0e9fd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:01:05.723061087+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"275aac50-5946-49b0-abd2-2340aa18a302","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:01:11.195827823+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"18b819d3-a0c9-4f25-a817-9009e86945ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:01:12.540045690+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara Go[...redacted 248 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d2784007-0f2a-416f-ab1d-b36005a2d9cc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-16T20:01:18.812181769+00:00","session_id":"5c8164ef-4ac3-45a8-b9d4-886f01a22834","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/\" 2>/dev/null && find \"/home/ccuser/o[...redacted 153 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b16bd18-658f-4c5e-8cab-b542b9dfa8f8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:00:59.403419749+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Fiel[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0aec767a-3757-424e-9954-42339dad4c23","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:09.284608530+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Fi[...redacted 218 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ae53c41-62cb-42b9-b861-dc88cb74accc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:10.618553574+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"cd \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 409 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e303dfb9-09d1-4a5b-8d3b-fa6032859834","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:19.545200092+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"date && echo \"---\" && pip install openpyxl -q 2>&1 | tail -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d6320c95-9d28-43cf-8009-c46f2d86ba6d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:25.219087145+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"pip install openpyxl -q --break-system-packages 2>&1 | tail -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"517b9a8c-764c-442f-8f81-c28c507b9978","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:32.888513176+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"cd \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 409 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"43b30261-0d74-414f-8aca-e6ca4774c830","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:37.141813573+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"which python3 && python3 --version && pip3 list 2>/dev/null | grep -i openpyxl","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"85069ecc-0e93-4953-9ba9-6d6f6fd274b9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:43.897341840+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"cd \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 446 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"37a305cd-af77-4552-9012-c75cc2fbeaa2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:01:49.204006092+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"find / -name \"openpyxl\" -type d 2>/dev/null | head -5 && python3 -c \"import sys;[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f366dc6d-1b8a-4e3a-8f00-b393463a1069","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:02:14.648534977+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"cd \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 412 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"96cdce6a-bd08-4c3b-8be5-ea8af373e2ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T07:02:28.941331225+00:00","session_id":"44ff5b18-d673-44e8-980d-07c5bc9bf6a5","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing/ 2>/dev/null || echo \"No Ongoing Jobs f[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72dbf0ea-7867-484c-9ac6-a51eef30c88e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:05.054509190+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null || ls /home/ccuser/o[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2b3d25da-2624-4b89-b6a3-93228b0fd7d9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:11.820471181+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2cb96ad4-eb7f-4be1-a7db-db9acc134252","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:15.504516226+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5c6d5521-d80a-4c5d-b4e3-634cc2bd19e6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:20.318246363+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc57c813-f6da-4788-9548-65b1cc607172","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:21.635180364+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53646e0b-23bb-4db8-978f-af6fc5184c0d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:22.965173181+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6e998736-8d7c-4f6b-8708-d756e117cede","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:29.600789733+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f5785e16-0c2a-483a-a90e-81c46734b45d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:38.219143768+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 82 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0d5dfc4f-fda6-4e85-b79c-4d96ffbdc130","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:42.550219952+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a7d6fd28-90c6-4910-a2f0-320800568f78","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:48.583711645+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e0d201b-603c-40e3-afd6-12d4487fdc12","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:55.159627894+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c177256a-be04-464d-aa39-5e275669bc85","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-17T20:01:59.731714781+00:00","session_id":"b0989790-5d71-46be-9a4b-2983c9e3ddaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"356cfd78-8093-4ce0-963c-73b097d2c608","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:00:58.378513128+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0620fa75-8fc5-4003-b592-4b08ac625005","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:00:59.798444750+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3cf13b6e-8ea6-4f29-b532-79ea78466921","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:01:09.528740798+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca6b7dd9-9efc-4da7-86ef-85488e4ecf6c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:01:10.890056520+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | sort | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d632015-12f1-4b3e-bea8-7347e4e06580","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:01:16.383091287+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a9629e51-897d-48eb-b40b-922ee8ce7ac5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:01:17.717939588+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8dbbd5b9-c12d-40e6-b0b8-e664cadc4ead","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:01:25.573860602+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 270 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f7bc6faf-15e5-48cf-a901-f46eb367ca7d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:01:35.687586675+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"date; ls /home/ccuser/opsman-work/daily/*.md 2>/dev/null | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91aa1966-7702-4a4e-bfe2-561a6ef47f11","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T07:01:42.611571087+00:00","session_id":"e5f15a42-b5f0-41eb-86cd-626d4e43a8f8","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"Hornsby\\|2275\\|Field of Play\" /home/ccuser/opsman-work/daily/ 2>/dev/nu[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d51d327-a158-4f17-a321-736dde064b6e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:00:52.436666997+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null || echo \"NOT FOUND\";[...redacted 75 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7e4b3413-2f86-4326-87d1-a4fe1db0998b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:01:07.427630737+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"050e87e3-9c50-43dc-bf6f-10fe85feacf2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:01:11.596062099+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 154 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"045f97c4-171a-4760-a65d-f55cd0808b3f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:01:15.663345742+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"02f84335-7acb-4774-86f8-5572085caf93","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:01:26.226016917+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9efc3811-bae2-4202-8d36-e0b083ff23c3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:01:32.543888080+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara Go[...redacted 165 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"422dd680-2f93-413c-85a2-537ce87c9a8e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:02:04.805896899+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 53 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"773d3a76-65ca-42a2-b902-ce36eec6088d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:02:12.841312955+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7b0ff77f-1f7a-459c-858b-b9a8a2a0a7fd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:02:18.389294311+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7666b8b3-1eb3-42f2-ae86-a346c2ca00e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-18T20:02:23.213048386+00:00","session_id":"e078a912-ac06-48ba-ad48-53a5321f143d","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara G[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2cde124-2289-4389-8c18-050fa37eef2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:00:33.369230970+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/ 2>/dev/null && find /home/ccuser/opsman-work/ -type[...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"93228095-b284-4c02-8036-db451d9912ff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:00:51.559122716+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70f481a3-9664-4948-9402-7977f640b759","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:01:05.913750454+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f3402ed-407d-406c-a099-1c953fe41b86","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:01:07.284362642+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 80 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"65c7b92f-2f09-41f7-9a99-e1ce45391296","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:01:24.836022101+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 44 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c6343f4c-58b3-4471-afc6-1bb87dee20b0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:01:26.149866462+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/photos/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea6dad3d-17c2-4207-a4dc-7bdbcc8c4112","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:01:27.477280261+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 125 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a01b370-a9e8-4d50-8e4b-957985941c00","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T07:01:44.746001819+00:00","session_id":"c829073e-2be9-4f8c-9a16-96afdcb6b8a2","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 172 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5ef7c340-be57-419b-b5c0-c546e93d5f53","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T20:00:39.977474416+00:00","session_id":"c7a3be4b-5594-4f76-9946-8ac4637376ab","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -name \"00-brief.md\" 2>/dev/null | head -10; e[...redacted 138 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d8602941-4729-48dc-a380-1f0e4c94590f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T20:00:49.587798416+00:00","session_id":"c7a3be4b-5594-4f76-9946-8ac4637376ab","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d8367c0a-ee17-424d-abf9-2463cb5be915","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T20:00:51.017414846+00:00","session_id":"c7a3be4b-5594-4f76-9946-8ac4637376ab","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d6f5d03b-067a-4ad0-8631-7e79aa979389","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T20:00:53.879534517+00:00","session_id":"c7a3be4b-5594-4f76-9946-8ac4637376ab","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5682eb6b-2115-4bd9-8fd9-dc79cd38865c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T20:01:03.026824901+00:00","session_id":"c7a3be4b-5594-4f76-9946-8ac4637376ab","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64cf9c9a-e6a3-4587-ace6-1c6890e616f0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-19T20:01:11.824405631+00:00","session_id":"c7a3be4b-5594-4f76-9946-8ac4637376ab","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 193 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc12b6f8-0654-49c0-a67e-f78fe7aba285","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T07:01:15.525468126+00:00","session_id":"156352c0-40aa-4746-b831-8090bc61c386","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f1b0622-d8e2-444b-880e-8fd6dea9987b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T07:01:35.529680741+00:00","session_id":"156352c0-40aa-4746-b831-8090bc61c386","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 186 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"043add21-2389-4e75-872b-7e78fd158846","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T19:37:41.521231106+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"hermes update","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"94724ca6-c90a-4014-93f0-8a675586d63c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T19:40:43.572065858+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"hermes --version","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c80b88c7-8b89-4758-ad8d-225a936b8c19","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T19:58:08.478229374+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git log --oneline -15","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06e2288c-0ba3-4f64-85c9-a152fddd705a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:00:33.721423241+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing%20Jobs/ 2>/dev/null || ls /home/ccuser/[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"95b0617a-ee30-4e30-8198-68c46a5abcd2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:00:46.504961946+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -name \"00-brief.md\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"56fb96db-dafb-40e7-8d05-0a1d2a408771","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:00:47.612957380+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs -name \"Job-Tracker.md\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"328da5be-5d8a-4930-af98-ef744983c93c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:00.671365623+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs/Ongoing%20Jobs/01-2275%20-%20HPE%20Field%20of[...redacted 81 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47d60829-5b4a-49ec-a7a1-135dc12aa895","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:01.793589866+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs/Ongoing%20Jobs/01-2275%20-%20HPE%20Field%20of[...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"db9fbb61-2721-4845-887c-21e26c7bcff6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:02.929012633+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/Jobs/Ongoing%20Jobs/01-2275%20-%20HPE%20Field%20of[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2d8ee403-e45a-4b1d-b3f6-5a16212088df","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:07.055309562+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21d663b2-de02-4025-ba77-7cf4caa09aae","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:15.914625166+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8c17137e-2fa3-4702-98e6-edfb8a3f04e0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:17.017859194+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0af8a22c-c76e-4e2e-9acf-09eaa6b7277f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:18.117258263+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5416de8-5c17-4a44-b54b-eccbceaf4c57","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:24.697650624+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"616ff58e-c9b0-477b-b2c7-da383dc0c085","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:28.776563457+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"45ba1eee-e522-4752-8142-425607463adc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:32.224708837+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"589fc614-94ce-4541-85d8-f36db8167690","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:35.781311546+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e8b02c30-c7e3-4f06-8c3a-a3b3ac25ed5c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:36.990479241+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"84aae895-7f1f-4621-a7b2-8df2c87d9468","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T20:01:38.068348983+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f681b120-efe5-4cb3-8329-289c4d10f8df","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T21:58:32.973154875+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"hermes --help 2>&1 | grep -i 'ui\\|tui\\|web\\|dashboard' ; ls /usr/local/lib/herme[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e88853df-a938-48a0-928a-c1da64441ded","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T21:59:41.377824522+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"hermes dashboard 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e30a34f-7591-4702-89bc-76c06799f4e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T21:59:45.057914060+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"sleep 5 && curl -s -o /dev/null -w \"%{http_code}\" http://localhost:9119","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"489ddde5-671a-4eb7-9b87-8e950ea228a1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T22:00:59.868145751+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dbc9cb18-cd24-4718-83ad-4d2bc0968f39","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-20T22:01:05.762537990+00:00","session_id":"96c5e6fd-3ae0-4466-bc37-248eeff01ab5","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/10_RateRight/FOIL.md 2>/dev/null && ec[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"acf47805-b50a-434f-8575-294fe8b5b56e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T07:00:50.831003927+00:00","session_id":"6a6324d5-32c1-4608-be4f-73c1739713ed","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"963db9c8-1dd4-409c-8205-1101f91ca53f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T07:00:54.513918988+00:00","session_id":"6a6324d5-32c1-4608-be4f-73c1739713ed","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 178 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5b6ff302-bb02-4693-a9a1-209fb11272c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T07:00:58.545581635+00:00","session_id":"6a6324d5-32c1-4608-be4f-73c1739713ed","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e9afeb25-1899-474f-b9cf-a1ecef13b0bb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:24.428050576+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e985c024-a15d-4d3f-98ac-a2acd6cc4a37","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:34.131795790+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cae68ada-225c-43ff-9a0d-20a9f633bd16","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:38.347294888+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"41530425-dc42-4281-b4d6-c347082298a7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:39.563141598+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50f455f1-5b18-48ca-b5ec-da3ef6fec079","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:40.759579321+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48a6c2c8-8e01-4271-9577-a3a72b5bc542","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:44.767602202+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59d35d32-3daa-4071-8d3b-69abe69459ad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:48.606052848+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"32aa2114-c2d8-4992-abd3-2a37230513ee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:50.969762585+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 172 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7ea338c4-2d85-4287-8e61-c1c24b231f6c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T20:00:56.175575193+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 217 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ecf6f6f-ef9c-470a-8362-e138a494e0aa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T22:00:37.628645659+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eefa989f-2d48-4b79-8f48-f47c50c453a3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T22:00:50.540960078+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null | sort | tail -3; ls /home/ccuser[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"920dc724-88ad-4d6e-8c4d-d8abb5ba9315","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T22:00:54.537790891+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/daily/ -name \"*.md\" |[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a7ce2e14-2ef6-4577-b768-5bbd90e4cbc0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-21T22:00:58.092175638+00:00","session_id":"27042907-94b9-45cc-acc1-5fc536b8cb15","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/ -name \"*.md\" | grep -i daily | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed7b0e8c-b1ca-42a5-a44a-c1c5052b45b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:13.788174980+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ddc365aa-1f83-49a5-88ce-3ed8bf004539","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:22.091326253+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ && ls /home/ccuser/opsman-work/daily/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d1cbeab-d4a3-496f-8e39-678a714e7924","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:30.998008162+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca4f2500-09e0-4998-b6bb-90cac86f732c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:32.115902992+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | grep \"2026-05-23\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c65639d-08b3-444a-9a0f-199eccef8583","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:40.131155750+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a5ab1d60-ab7a-49a2-ad56-26db7d100f53","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:41.227702032+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 53 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"945866c7-619b-43c1-ac19-ffcd353ec8d6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:45.352266552+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44b24047-c585-4726-ba9e-441cf4edc6dd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:46.461937931+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f996580-0bfc-42b7-8cda-60e413b42666","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:01:53.309984298+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c934492-fc0d-4e82-8418-a6a70490c5aa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:02:02.036760502+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 164 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67ae285f-6d6b-4e11-96c0-456424d3cd0e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:02:09.106531644+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/photos -name \"*2026-05-23*\" 2>/dev/null; find /hom[...redacted 119 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bb45d84e-2866-4926-97a8-57d12255277a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T07:02:16.241205594+00:00","session_id":"0d47b040-e2b3-4575-8c04-34668f18af87","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ && cat /home/ccuser/opsman-work/daily/2026-05[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d431f9a-588f-4f6f-8fe2-90e53bfc831e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T22:00:31.385737072+00:00","session_id":"705ffb6c-82e3-42c1-afcb-9d2f3d6ff012","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort -r | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f3b737a-135a-418f-9946-2e461cd6606c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-23T22:00:39.190143442+00:00","session_id":"705ffb6c-82e3-42c1-afcb-9d2f3d6ff012","action":"Allow","rule_ids":[],"command_redacted":"date '+%Y-%m-%d' && ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort -[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"815adde6-484e-4e68-b659-26f5df9ee42e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-24T22:01:07.118629090+00:00","session_id":"e4fb7ab2-b993-442c-85ea-e821087bd3bf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c68140e9-6b29-41bd-ba16-6b353b5fe372","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-24T22:01:15.580268205+00:00","session_id":"e4fb7ab2-b993-442c-85ea-e821087bd3bf","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | grep -E \"^2026-05-2[0-9]\" [...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"34246200-5802-4c70-8579-1db90287f353","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-25T23:11:42.655032657+00:00","session_id":"e146d512-835d-49ca-ad59-06b5071fb286","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/goals* 2>/dev/null; cat ~/.hermes/goals.json 2>/dev/null || echo \"n[...redacted 195 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c39b47b9-5db2-456b-9dee-7a0954f7900f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-26T07:00:49.399824632+00:00","session_id":"851309ba-63f4-41dc-b5c9-3066f352a49b","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4250b54c-889e-4deb-a65e-8b1c7b532b78","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-26T07:00:50.599459532+00:00","session_id":"851309ba-63f4-41dc-b5c9-3066f352a49b","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72ce0e2a-469e-43bb-ac9a-3e886d31c88f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-26T07:00:55.153968152+00:00","session_id":"851309ba-63f4-41dc-b5c9-3066f352a49b","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d603bfd-6230-4c21-906d-61f564c9f361","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-26T07:00:56.279707385+00:00","session_id":"851309ba-63f4-41dc-b5c9-3066f352a49b","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b1f9ae0-00ec-4f61-abde-84f510088ac0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-26T07:01:03.557750002+00:00","session_id":"851309ba-63f4-41dc-b5c9-3066f352a49b","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a131c51b-c8ab-4706-b931-3ae4a20d980a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-26T22:00:45.151613098+00:00","session_id":"17bdf4e0-3c1f-40cc-92b9-3ddd35649f80","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e830cfe-be5f-4cd3-8c84-a724dab69ad5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T07:01:08.066726482+00:00","session_id":"97e9ed70-bd21-43b0-bb35-417e998447a4","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"*.md\" | grep -E \"(Daily|Diary|Job-Tracker)\"[...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"705aff78-3e2c-4afb-bccd-b468a9e9089a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T07:01:09.217412354+00:00","session_id":"97e9ed70-bd21-43b0-bb35-417e998447a4","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/07d\\ Daily\\ Diary/ 2>/dev/null && ls /home/ccuser/op[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e968d6e7-c725-4c8a-8601-ba10d4a68c47","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T07:01:16.307479132+00:00","session_id":"97e9ed70-bd21-43b0-bb35-417e998447a4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"accef734-3be2-4488-b0b8-ca68999086f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T07:01:22.805151458+00:00","session_id":"97e9ed70-bd21-43b0-bb35-417e998447a4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e0e86f16-3b05-4a2e-8171-7543336a114e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T07:01:23.927732980+00:00","session_id":"97e9ed70-bd21-43b0-bb35-417e998447a4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"10cc655b-df9e-4f70-b3cb-f6b15036bd6d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T07:01:28.373367003+00:00","session_id":"97e9ed70-bd21-43b0-bb35-417e998447a4","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 206 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c35f7150-614c-4ec7-ad30-6ea3865a5633","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T07:02:03.730051801+00:00","session_id":"97e9ed70-bd21-43b0-bb35-417e998447a4","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 186 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a18766f9-f63d-4845-bde6-d8ea67cbda10","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T20:00:38.090112958+00:00","session_id":"d12da8b0-85a7-429a-a1bc-55c65ad35494","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f0367b89-bf5e-4051-8dfa-8f62db1069b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T20:00:44.438179670+00:00","session_id":"d12da8b0-85a7-429a-a1bc-55c65ad35494","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 160 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"49018f13-de18-48b7-9df8-c4963c7b0618","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T20:00:46.501228668+00:00","session_id":"d12da8b0-85a7-429a-a1bc-55c65ad35494","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bf15b274-95b9-4adb-8b73-d3347ace0066","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T20:00:49.258007712+00:00","session_id":"d12da8b0-85a7-429a-a1bc-55c65ad35494","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 142 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24aed22f-b6a5-46cf-8f09-0d2879525fff","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T20:00:53.223128844+00:00","session_id":"d12da8b0-85a7-429a-a1bc-55c65ad35494","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c74ed9b8-d9f0-405c-9d9e-b150ef6a2c7c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T20:01:00.219936142+00:00","session_id":"d12da8b0-85a7-429a-a1bc-55c65ad35494","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"19df3521-3e56-4f9b-a324-6cf5fbf8324d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-27T22:00:19.833356572+00:00","session_id":"d12da8b0-85a7-429a-a1bc-55c65ad35494","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"caef93f9-b98c-4ec4-bd97-1049f75d1e55","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:02.215318018+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/07a\\ Dockets -name \"*2026-05-28*\" -o -name \"*28*\" [...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4f5de4e2-effa-4a31-9857-557a52e15dd4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:12.485016568+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing/ 2>/dev/null || ls /home/ccuser/opsman-[...redacted 22 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed2c2ba9-c2c5-44f8-b6b0-cc1088ae117f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:16.789706997+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing/ | grep -i hornsby","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2558b47e-6513-47a2-96e0-45e22b86e8ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:20.275953033+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5bdcd6ea-d941-4bca-b8ce-ae3c0373e968","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:25.916095155+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c151ad01-da84-401a-8b6a-488eeaeb755e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:27.022745088+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67ca62db-31b2-4f5e-8545-31eb250c60e4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:28.147979748+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 43 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ec49a09-d8cd-4d50-9954-06fd8b7dd275","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:34.541453999+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"238230a8-d693-4d06-a10f-b1514ff2b8e7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T07:01:35.639424320+00:00","session_id":"cbf4c9ec-cd25-4f87-84ee-a83b1987dabe","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d32fac0-84ec-49ee-ae8c-be2c4e51a54f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:20.504757556+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/ 2>/dev/null && ls /home/ccuser/opsman-work/Jobs/ 2>[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f5cc663f-1b72-40e0-ab75-c0c1a779d4b2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:24.687508814+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null && ls /home/ccuser/o[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"828ab7fa-c01b-42ac-8578-502dd8396c20","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:29.094634933+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9dffc5a5-ed00-4a39-873a-f628dea6c1da","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:36.604332055+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 257 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c82925a7-18e7-4e75-9b63-bd999ea820fc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:40.585200197+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8a064af-aba7-41a1-8d61-3e28cb9bf2d7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:45.461330222+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 250 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4288ee0b-df84-43e0-a28d-77a645f636e1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:52.572954185+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"104c4104-6e64-462a-b434-83a8aae44317","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:53.713787375+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 179 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"04bdf78d-aca0-4b66-93ec-2a565a5e0477","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:54.819016695+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aa7ab581-4507-438a-9744-d522084a2c07","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:01:55.947905133+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 190 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"566aa6cf-3745-4014-b080-cf8dd3e33c21","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:02:02.796514706+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 204 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"29845f83-dfff-46c0-8302-b9a66044a861","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:02:08.444444409+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara Go[...redacted 171 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aba1f39b-4fde-4e08-85ef-63ed2fdd9072","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:02:16.844273920+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/daily/\" 2>/dev/null | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b84e1b7-7b2f-4ae8-b73e-8d3b60c90d65","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:02:23.757125634+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/daily/ -name \"*.md\" 2>/dev/null | tail -5; find /h[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"32120592-6980-4b37-ae0d-c332fcc6d5ee","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:02:30.113558036+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"date && cat /home/ccuser/opsman-work/health-log/$(ls /home/ccuser/opsman-work/he[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"323a061f-3881-4feb-835e-57276e11db3c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-28T20:02:37.395223390+00:00","session_id":"b354ff9f-6127-4b26-8a06-19f48f44ea3a","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/daily/2026-05-12.md\" 2>/dev/null; cat \"/home/ccuse[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"217e9a21-56d4-479c-92e8-9f448bda14a3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-29T07:00:38.562971726+00:00","session_id":"cab0e34a-bc3b-4735-933b-77bfdc75ae82","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ece6de37-6583-4eba-9f51-2f02871760a6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-29T07:00:41.027229518+00:00","session_id":"cab0e34a-bc3b-4735-933b-77bfdc75ae82","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 188 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5b0984da-666a-48ab-8c17-1858a5ec378c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-29T07:00:43.919158184+00:00","session_id":"cab0e34a-bc3b-4735-933b-77bfdc75ae82","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 231 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7585fe3e-88e0-48db-9829-9271ba1e2976","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-29T07:00:46.359141805+00:00","session_id":"cab0e34a-bc3b-4735-933b-77bfdc75ae82","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"95776420-79e6-473c-a6c3-5350f522b2d8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T07:00:33.587286327+00:00","session_id":"a0500563-a9e3-480a-b915-0de5d646224c","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fdcd274b-c557-4b10-9e18-6e2efdd2a2b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T07:01:03.096598843+00:00","session_id":"a0500563-a9e3-480a-b915-0de5d646224c","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 202 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8de01579-537b-4be7-a06d-38c71c4d82c6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T07:01:10.869665752+00:00","session_id":"a0500563-a9e3-480a-b915-0de5d646224c","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"04f5f5e0-8a5e-49fb-8b92-2dbb04403ca1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T07:01:18.249027758+00:00","session_id":"a0500563-a9e3-480a-b915-0de5d646224c","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d2ffad32-0852-4241-92ab-d2237c7450c8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T07:01:26.131758120+00:00","session_id":"a0500563-a9e3-480a-b915-0de5d646224c","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 305 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"37c2adcf-cb41-4b74-adf1-7be547cf8a4c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:00:47.490264958+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null || ls /home/ccuser/o[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cc975727-254e-4e13-8593-0291d8dd3223","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:00:56.900093241+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1889c8c0-5fb4-4281-a932-b8cde29175bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:00:58.031987777+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 60 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3ec16b95-8715-4cdc-b830-1a22ea571543","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:00:59.164279350+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3cb1b48b-6bfd-4be0-b7f5-149393ef8f06","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:01:00.285111975+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 51 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b7655fe-b660-4574-b414-70ff4c183b18","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:01:06.712576349+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"10b8c0a3-12ac-4c52-ba19-8c60c4ad240d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:01:07.864093361+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b44d061c-655e-48a4-a7fe-54803391dc51","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T20:01:16.812013352+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 150 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c2afe0d-491e-4554-8e1f-2d88a822a11c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-30T22:00:33.476510200+00:00","session_id":"3334224d-dd91-409a-8933-73cb95b0b965","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0a9cfa8-4e14-4a9b-852c-a7b752d092ae","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T20:01:12.818476677+00:00","session_id":"364ff2eb-c982-404a-a317-7cfd048ca771","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara Go[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"979e1e66-1a7a-4b42-adf7-cd2688846927","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T22:00:41.050438045+00:00","session_id":"364ff2eb-c982-404a-a317-7cfd048ca771","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ba8984a1-db24-499f-b06b-e362172b8026","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-31T22:00:49.420864852+00:00","session_id":"364ff2eb-c982-404a-a317-7cfd048ca771","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/01_Daily/ | sort | tail -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"713a7045-30f9-49a0-99ca-7bed1791b7b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:14.233111933+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"381d33e1-674b-4ecf-bab8-9e2f850e5dbf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:28.554362659+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bba96ab3-df3e-4aa6-88ff-74eebd04155e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:29.761777893+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 75 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"85c75687-e8a8-44f6-8682-6f1ef7e210b6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:35.475323111+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 210 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef86ce5a-fa45-4781-9b70-242045b9488f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:41.577128109+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d76ebfa-57ae-4d3f-aa74-af453e3695e9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:47.945872521+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 159 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b0e1b99-a11b-4762-89ab-cd75474fac3d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:51.902685275+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Fi[...redacted 212 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6b5feced-f886-4a95-8922-99a30fbd893e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T07:00:57.367678826+00:00","session_id":"7a6321dc-07da-4696-8441-c31ae9d4c780","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f02a433-a68a-4ff1-bbf6-df6f49ab2fa7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:26.772674267+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null && ls /home/ccuser/o[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e41ee2bb-880e-425f-90d6-5e8c25c2a0ce","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:29.034493656+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ && echo \"---\" && ls /home/ccuser[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6831d259-2ccc-468a-9cb0-340ac6529124","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:37.198285358+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4a34022d-18c5-4844-a191-806115ecef49","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:38.360544683+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"84c164cc-030d-4d1e-b7c3-963af4f2696c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:42.405802661+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 205 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b6b28d8a-3711-4b3f-9754-c5e6052e17e0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:46.166817286+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf7a5ce1-c458-44c6-b06a-66ba458c1ec8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:47.315350477+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a72f64a1-ebf7-4afb-8c4b-1268dbb64f08","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:50.907982509+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9aeab407-6437-4495-9220-66a4031d4350","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:56.261283565+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field[...redacted 415 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fcd5afc6-0470-4825-a8ed-c41e65b4d0c0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:00:57.404754145+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"982031fb-d4c2-442b-85ae-f35543ed0114","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-02T20:01:00.978316569+00:00","session_id":"9a80c54e-f98e-498c-bc23-b60ba6a43cb4","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4d487b4a-df76-4e8c-ac5e-5ce1a557749c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:00:56.375793950+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/\" 2>/dev/null || ls \"/home/ccuser/rateright-gr[...redacted 58 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"80bc89c7-5fb0-4b68-8659-a350c7a13ca0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:01:01.613395292+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\" && echo \"---\" && ls \"/home/ccus[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d63988dd-5c91-4da8-b6ba-878097645642","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:01:18.170193653+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 175 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81e603d2-24c3-42df-b3a9-760e7b55a2ad","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:01:19.330962574+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 165 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a34a692-31b5-4bf4-befc-87360d420d3f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:01:27.766354022+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3cf1183e-c5ab-4221-9398-a5edc22c392c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:01:38.463773267+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 196 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a069b1a9-3559-40d9-a39e-d1b647b4efea","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:02:11.415160059+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"09a32af8-d89a-4be5-ae29-bd6c4dfb862b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-03T20:02:23.203948724+00:00","session_id":"c89e05e7-879a-4043-a970-6ebe7a9cf136","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 62 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a62dd8d-5ddd-4749-af12-93a3a45c4c1a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T07:00:33.926405746+00:00","session_id":"0d04e770-21ba-47f2-8357-674860d06846","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7085218a-ff71-4710-a35a-c4af717553cf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T07:01:39.291096705+00:00","session_id":"0d04e770-21ba-47f2-8357-674860d06846","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e74a1f4-8830-49fb-8f45-df5f9edbfdf9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T07:01:43.958958842+00:00","session_id":"0d04e770-21ba-47f2-8357-674860d06846","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"62e75fe8-198c-44a6-b89a-a4fb9c1019ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T07:01:48.966485918+00:00","session_id":"0d04e770-21ba-47f2-8357-674860d06846","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Fiel[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f733975-e23f-42d1-88fd-8be91fe186d1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T07:02:28.642241836+00:00","session_id":"0d04e770-21ba-47f2-8357-674860d06846","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 195 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1d8428a4-e805-4454-913d-9b8e20103a2f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T07:02:37.183446131+00:00","session_id":"0d04e770-21ba-47f2-8357-674860d06846","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"52ab29a8-cb35-4459-85c1-15324713c021","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:09.030191937+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bae906e-6bf5-4992-a3df-e56fcc07540b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:13.274519916+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\" && echo \"---\" && ls \"/home/ccus[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e52bcab6-aa2a-46bd-8d3b-0f50776d82ec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:21.563216775+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ccc86677-bb36-4462-b24f-181558479a81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:28.829266652+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c68937b-0ec2-47fc-9a5b-a6db27bf4666","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:29.934159318+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9214988a-42e3-47f7-b732-4f444d48cecd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:37.224640795+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab948970-9087-4ef9-a87d-e330ab8d9f87","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:44.492761758+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 17 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cdb23273-e2d6-40ed-b2f2-a97ce8d9720b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-04T20:01:57.857983106+00:00","session_id":"3bdf6b42-dcbf-4ed5-a502-e40458749aad","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Field [...redacted 222 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0c2d492-1208-467b-a771-25a94463295f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:01:37.578782264+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser -name \"*.md\" -path \"*07d*\" 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0f538435-7ed8-4aeb-adae-5141a492bc20","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:01:46.688258343+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser -name \"*.md\" -path \"*07a*\" 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"38aca772-f26c-40ee-a534-9a4ce343a1bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:01:48.778794704+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser -name \"Job-Tracker.md\" 2>/dev/null | head -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"632362cc-3729-40b8-a389-42c9ced10a75","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:04.079153205+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"831142fd-09cb-4212-8643-1b617d733161","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:09.055616245+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ae97496-d8d9-42fd-a6f1-6f27f69eda0c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:10.192592908+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs\" -name \"*docket*\" -type f 2>/dev/null | head[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"15a9017e-9a9a-418d-b343-5b4d04dfaa8e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:14.662951074+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72006ddb-2c0e-48ea-8ad0-aadd46a5dc25","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:21.366182603+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs\" -name \"*.jpg\" -o -name \"*.jpeg\" -o -name \"*[...redacted 89 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"871f4b6c-69a9-4b8c-8f4a-5e32cbc1b531","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:22.498547025+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Fi[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8e0980b5-3ae6-4b77-bb7b-b24abf95cf8e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:48.193728602+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs\" -type d -name \"*photo*\" -o -type d -name \"*[...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f3c786da-e18b-4e40-9bea-d7652daa76dc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:02:49.350706151+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS\" -name \"*.md\" -newer[...redacted 156 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06eecf60-e60b-47a6-941a-6056f00b4fd9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:03:11.458687586+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser\" -name \"*.jpg\" -o -name \"*.heic\" 2>/dev/null | grep -i \"horn\\[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"30054456-8fef-401b-8954-40088acddb55","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:03:13.928899428+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275\" -type f 2>/dev/null | [...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dc9768bf-2451-4ecb-9a36-c17a596cfc46","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T07:03:39.287396795+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Upcoming/01-2275 - Solutions Plus - HPE Fiel[...redacted 73 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"53c3787d-973e-4800-95be-1e18df0f1bb4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:37:06.277659076+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/.archive && cd ~/.hermes/skills && for skill in github[...redacted 373 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"91d377e4-9d69-4cf4-ab8c-c1ea04f94ac3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:37:11.622655975+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ 2>/dev/null && echo \"---\" && ls ~/.hermes/skills/g[...redacted 129 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"240c6d71-1b6b-42bc-93ca-07c96a2d7449","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:37:24.009353775+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/autonomous-ai-agents/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"527f760c-bfe7-47f9-b34e-d901e4518598","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:39:31.843397243+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes/skills && for skill in systematic-debugging python-debugpy node-ins[...redacted 129 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cd93c52f-01a0-4619-a308-8b7baa55e113","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:39:36.565496502+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/software-development/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b297086-ed2c-479c-856f-3f5132106b6c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:42:47.787369471+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes/skills && for skill in airtable google-workspace linear maps notion[...redacted 139 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8cfc21c7-fe02-4ed8-b72f-6b8516d86d74","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:43:02.438772567+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/software-development/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ff0f94b2-4a45-484f-ae9f-f44a6c084ef2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:43:20.335404075+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/creative/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8425f1d4-3d9f-40f1-ab60-d36a469f06d6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:43:30.842714312+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/devops/ && echo \"---\" && ls ~/.hermes/skills/email/ && echo [...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1e89d6e-4649-44b8-9534-93e69c45a144","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:44:27.362434430+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"mv ~/.hermes/skills/chat-bootstrap ~/.hermes/skills/.archive/chat-bootstrap 2>/d[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"576c332a-ae88-469a-ab52-acda32eb2198","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:44:41.123218210+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ && echo \"---COUNT---\" && ls ~/.hermes/skills/.arch[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"40fd89f8-ed52-40ea-bea9-6e022d1913cd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:44:49.110369455+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/data-science/ && echo \"---\" && ls ~/.hermes/skills/dogfood/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4f9821c0-1b85-4615-8a58-0e9312ca61a5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:44:56.096370483+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/autonomous-ai-agents/ && echo \"---\" && ls ~/.hermes/skills/c[...redacted 160 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bdad5505-eea1-413a-a757-39e9575609ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:45:03.771325755+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ | grep kanban","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"67293eda-286f-4ea9-b05d-a7042f9b875c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:45:19.468134015+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"mv ~/.hermes/skills/autonomous-ai-agents/kanban-codex-lane ~/.hermes/skills/.arc[...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c4cd0ba-b0b5-4a43-bffa-1ffb4acd75d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-05T08:45:32.106772085+00:00","session_id":"ec16bb57-f3dd-4bee-b742-2cee1b7527c3","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/github/ && echo \"---\" && ls ~/.hermes/skills/ops/ && echo \"-[...redacted 127 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ecee424c-de6e-44df-8ebe-71383386c5fd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:34:33.208452581+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git log --oneline -20 && echo \"---\" && hermes [...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d15eb80c-019e-480f-93b0-62501ddfc03e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:34:50.640721190+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"hermes update --check 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"99bfcfa2-5cfa-4114-87e9-4b2cd897c7c4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:34:56.871846396+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git fetch origin main 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bf78d727-05a3-4de3-985e-a786d30c9731","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:35:01.987351442+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git log --oneline origin/main -40 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"241fe1f3-17ed-4caa-9c99-2602364a7d81","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:35:08.898995256+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git log --oneline origin/main | head -5 && ech[...redacted 91 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7445de9-ee46-4fdb-af1b-d5cacd205521","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:35:17.558794199+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git log --oneline v0.14.0..origin/main --no-me[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bd6757b6-b80e-4c91-9d75-ab501ec2c8da","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:35:22.412305532+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git tag | sort -V | tail -10 && echo \"---\" && [...redacted 55 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b6c33f22-19ef-498f-b4e2-89d00964bc96","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:35:28.278849753+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"cd /usr/local/lib/hermes-agent && git log --oneline v2026.5.16..v2026.6.5 --no-m[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e1e9ab81-6926-448f-8382-2959dea77f45","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:50:05.892259882+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"hermes update 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f0863316-2664-4479-9b74-c8f6471ee8e0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T21:54:12.505830899+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"hermes --version 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1be0f545-0951-4918-93b8-6b242718a6ab","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-06T22:01:21.709556126+00:00","session_id":"f30d92a8-e95f-47cf-89e3-5cceb00dd515","action":"Allow","rule_ids":[],"command_redacted":"ls -t /home/ccuser/rateright-growth/HQ-Vault/01_Daily/*.md 2>/dev/null | head -3","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b64e31b-4afb-4bde-9294-6500bccee6f7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:00:17.542041899+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ /home/ccuser/opsman-work/Jobs/Up[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2966f8e4-9880-4ee8-87d9-c4630b37dbaf","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:00:22.285344682+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/01-2275\\ -\\ HPE\\ Field\\ of\\ Play\\[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"063dbe07-27de-433a-b9ce-747749604b87","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:00:30.861468492+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4c0e459f-9595-4690-9098-fff7662167e0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:00:32.106791849+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b67ed84-5fca-408d-b728-f1fe1ad3bc22","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:00:38.447783140+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d7af8f1b-3a83-4db1-b6cc-3120e5eb618a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:00:46.586492874+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 79 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"550e328d-5184-4d15-8b68-6ec478de310a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:00:51.784459103+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/ -name \"*subbie*\" -o -name \"*_subbies*\" -o -name \"[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b2448cce-c919-45f1-92f0-fb5a5b77feb4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-07T20:01:00.424869231+00:00","session_id":"114aaab0-bd24-4e3f-aa81-e6e08459906d","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"860c0602-869d-4266-9144-43cc603c1729","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:00:23.616711343+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/07d\\ Daily\\ Diary/ 2>/dev/null || ls /home/ccuser/op[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9953d170-2371-414a-91bc-655c9ecf6571","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:00:35.578536851+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"71bc6d37-7c24-40b4-9234-953bd6994af5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:00:36.891487919+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a59b86bf-f6fd-4f97-9f6b-df536e3ee322","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:00:51.194924137+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | sort | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"87d284df-6e8a-4baa-9f8e-3f50be04d36a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:00:52.302787883+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing/ | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4afa8dbe-2fad-46c3-9df4-b9c580174941","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:00:59.080345852+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/daily -name \"*.md\" | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5c03ccb7-97d1-4031-a724-4c391521bac7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:00.179493851+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"07a*\" -o -name \"*docket*\" 2>/dev/null | hea[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"452d0a13-0249-4762-bb66-f818e3ea9a52","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:07.682841102+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -path \"*Hornsby*\" -name \"*.md\" | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16c482c9-8026-45f3-964d-a45efc6f4598","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:08.815155423+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2bb860bd-512d-48e5-a944-4e8c47f05724","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:28.146505313+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"df0e96fc-5833-4baf-befc-42aa46421d35","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:29.245459817+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/daily -type f | sort | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8a8982cd-667d-4b5f-ab73-0fe42b67d233","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:42.293779281+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/photos/ | sort | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4bf7572b-6432-41ac-ba8a-be7a14842784","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:43.386945022+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"*.md\" -newer /home/ccuser/opsman-work/Jobs/[...redacted 93 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"27e250b1-75a5-4a13-b45d-3ddadf2f9fa0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:53.851892547+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"83c08e5b-0729-4409-b0d9-0dd8693908d8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:01:54.949906490+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/photos -type f | sort | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f56122ce-c581-4ed3-8ee6-774b7e88793f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:02:24.443216508+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -type f \\( -name \"*.jpg\" -o -name \"*.png\" -o -name[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8f10270c-c97c-4c45-a6b7-bcffa8cbaf6d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:02:25.567025609+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"ls -la \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play H[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"deb9446a-0b28-4d40-823d-b3d048a26605","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:02:26.679984477+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/health-log/2026-06-04.md 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ec401939-5660-492f-a6d5-25010bd17796","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:02:40.028397181+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"2026-06-08*\" -o -name \"2026-06-0[78]*\" 2>/d[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"491bb999-aa71-470c-a07c-4e4c0998603d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:02:41.121195990+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"*.jpg\" -newer /home/ccuser/opsman-work/Jobs[...redacted 94 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c4ad895-d474-4afd-9d4f-b2b85ea68a12","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:02:49.744726198+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/health-log/2026-06-07.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"03183655-a927-408a-a4a4-45fc4986c855","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:02:50.841489736+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"*.md\" -path \"*Hornsby*\" | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ab12428b-2a5f-44d1-8c11-ff9784824691","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:03:11.302654948+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/Jobs/Upcoming/01-2275\\ -\\ Solutions\\ Plus\\ -\\ HPE\\ [...redacted 94 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"89dddbd9-ce20-4ecb-9e2e-aeba2f9989d5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:03:28.264979822+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/health-log/2026-06-08.md 2>/dev/null || echo \"NO EN[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3ff896c-6588-427f-a686-352a29585eed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:03:58.538998078+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"*.jpg\" -o -name \"*.png\" -o -name \"*.jpeg\" 2[...redacted 59 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c4a8e61f-3268-45c3-a388-b7a54ccd6ab0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-08T07:03:59.632924584+00:00","session_id":"a91837e3-72dc-46b4-a117-7f8876180a50","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work/photos -type f 2>/dev/null | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1fd54e96-d0b9-4ca2-ac51-bf732d052dfa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:00:44.885865109+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c616bc0e-5f3e-49f4-8c36-eeb56997d559","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:00:49.096865569+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"78ef4da4-734f-4fd4-a726-394ab814b7d5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:00:50.203654208+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"be180b9f-10f0-4edd-9f98-e85ad86e6016","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:00:58.020629346+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca2bbe68-e7cf-4012-a435-99a29c7680ba","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:01:05.641931981+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 4 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7c9e41c7-0127-4f11-83e9-dca6aec6a304","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:01:06.757707377+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"07638a23-30f4-4224-bb25-eabcc52393dd","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:01:17.950307407+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9b1130e1-d5fc-488f-afc8-5d60abcd57ed","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:01:25.285672951+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8aed43b8-480a-4a90-9ff2-b2e582c95315","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:01:26.409194798+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 42 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f7ab0126-0796-450e-9b4a-0bf54b8c0248","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:01:35.226222739+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/photos/ | grep -i hornsby 2>/dev/null; ls /home/ccus[...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8d5b4b1d-d833-4cfb-adf5-abbef2051a03","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T07:01:53.408167597+00:00","session_id":"92cec9a9-750a-46d2-bf20-5e91c885feaa","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/photos/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fba2a434-a9d0-48be-93c2-5d4e4c500e0c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:00:57.923083484+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -maxdepth 3 -type f -name \"*.md\" 2>/dev/null | hea[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"012ec588-63b7-4fdf-910a-e06beaebd46b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:00:59.023027545+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d3884a9-da76-4de3-856a-69d84c4fcece","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:03.564929041+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/ 2>/dev/null && ls /home/ccuser/opsman-work/Job[...redacted 86 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a85400b8-de89-4fc5-9687-e87f34e72732","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:04.696418553+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/lfcs-standards/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e55b0845-a2dc-4fc6-a83c-39e39b57d0df","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:10.278085721+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"81e8a8f6-bd3d-4cc2-8429-ec7975a36770","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:11.397057328+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\" 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bba0fad7-bcbd-4ed9-8fed-c7ca96ec5b29","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:23.137554868+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aaaa5005-f8d2-4731-9a35-fd1d4048662e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:24.222447929+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 36 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d97684fb-dbff-40a0-b790-f9b2195a85d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:35.399124383+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horns[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"394ef932-9808-45e4-b40a-389245612962","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:43.359058441+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 88 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4d0f51a-b281-46b3-8175-4d9197834466","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:49.203232348+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1e6b02bc-dbca-4d55-856c-d2c6e7fcd9cc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:54.038250821+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/notes/ 2>/dev/null && ls /home/ccuser/opsman-work/re[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7d3a11c-167d-4d38-8e19-029fbca640f6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:01:55.133601643+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"*.md\" -newer /home/ccuser/opsman-work/USER.[...redacted 66 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"96802b5d-b5ee-413a-9494-bd9fe67b0131","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-09T20:02:00.130273412+00:00","session_id":"f21d1d52-a381-4834-90b8-297d15c292cc","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/notes/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"885ce89d-7ca2-4177-8a01-def2966dc0c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T20:00:35.224925260+00:00","session_id":"b7ef87b2-d9f4-40cf-8b4c-72222f1f8488","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/Jobs/Ongoing\\ Jobs/ /home/ccuser/opsman-work/Jobs/Up[...redacted 56 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cf79789a-4234-4040-b002-a6330ddc3889","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T20:00:45.535154771+00:00","session_id":"b7ef87b2-d9f4-40cf-8b4c-72222f1f8488","action":"Allow","rule_ids":[],"command_redacted":"find \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Hor[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"364d49e5-0729-40ff-afe7-f2b99ddefe79","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T20:00:59.426312793+00:00","session_id":"b7ef87b2-d9f4-40cf-8b4c-72222f1f8488","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ 2>/dev/null | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7a9397b-74a9-4849-ab67-7658200255b0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T20:01:06.748007999+00:00","session_id":"b7ef87b2-d9f4-40cf-8b4c-72222f1f8488","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/opsman-work -name \"2026-06-11*\" -o -name \"2026-06-1*\" 2>/dev/n[...redacted 14 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e402b4e4-f3f0-440c-892f-ff971aba3265","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T20:01:18.168718599+00:00","session_id":"b7ef87b2-d9f4-40cf-8b4c-72222f1f8488","action":"Allow","rule_ids":[],"command_redacted":"date +%Y-%m-%d","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a1d19f1e-5795-4a0f-bec7-b0967cc7bbec","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:38:55.765211082+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep -E '3000|4000|5173|8000|8080|8888' 2>/dev/null; ps aux | grep -E[...redacted 70 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5b31b58c-361b-4d63-9afe-68c624b1dc15","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:39:04.457102683+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:3000 | head -20; ss -tlnp | grep 4000","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cdb91738-e5ca-4e99-8d56-0ecfba29ce21","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:39:17.407508229+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep hermes | grep -v grep; ss -tlnp | grep -E '8000|8080|8888|9000|517[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fbdff81c-d659-4f31-a46e-dd5f2a4d6085","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:39:27.752571568+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep python; curl -s http://localhost:8000 2>/dev/null | head -5; cur[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"48065625-baa6-4fbf-a9f1-f8a6c88bb0b7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:39:38.692396389+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8765 | head -20; ps aux | grep -E '8765|streamlit|gradi[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"31dd9e24-a0c9-4a5c-adc1-22e8fdd03df1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:39:45.720777726+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/config.yaml 2>/dev/null | head -50; ls ~/.hermes/ 2>/dev/null","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3e380dce-1c66-4fb6-a110-86c734079741","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:39:53.530550837+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/config.yaml | grep -A 30 \"^web:\"; cat ~/.hermes/config.yaml | grep[...redacted 91 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7fcdfb56-cc81-47a8-87a0-d0ee52fc455f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:39:59.153466908+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/gateway_state.json 2>/dev/null; cat ~/.hermes/gateway.pid 2>/dev/n[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c44835a9-b1be-4605-844a-588672648203","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:40:11.252942364+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"curl -s http://localhost:8765/ 2>/dev/null | head -10; curl -s http://localhost:[...redacted 92 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"697d56f1-120a-42d0-9aa8-a31ac54b3742","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:40:20.382527263+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ls /usr/local/lib/hermes-agent/ 2>/dev/null; which hermes 2>/dev/null; hermes --[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2966a16b-8e50-4ade-b872-9a3fea4b3067","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:40:33.580140454+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes dashboard --help 2>/dev/null; hermes portal --help 2>/dev/null; hermes gu[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c0ebefb-838b-4d3e-be99-2032a7abc710","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:40:43.947712090+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes dashboard --status 2>/dev/null; ss -tlnp | grep 9119","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3901986e-0820-4635-9071-fc346ac33cde","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:46:09.351176500+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"tailscale ip -4 2>/dev/null; cat ~/.hermes/.env 2>/dev/null | grep -E 'DASHBOARD[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b0583e5a-c615-454c-ad69-5375f4118fa7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:46:15.189716463+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"openssl rand -base64 32","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1b2471a4-29f8-49d3-bc41-3b8afea5424e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:46:25.614808084+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["dotfile_overwrite"],"command_redacted":"PW=$(openssl rand -base64 20); echo \"Generated password (not shown): $PW\"; REALP[...redacted 404 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"924fc13b-8925-4c8c-a03e-4c034c1bae34","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["dotfile_overwrite"]}
{"timestamp":"2026-06-12T02:47:02.068963846+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes dashboard --host 100.116.48.82 --port 9119 --no-open","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e87127ea-365e-4b1e-aeba-db5af250097a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T02:47:11.529333785+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink"],"command_redacted":"sleep 4 && ss -tlnp | grep 9119 && curl -s -I http://100.116.48.82:9119 2>&1 | h[...redacted 7 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e385d3f3-9e71-4603-aa85-e1190105db07","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink"]}
{"timestamp":"2026-06-12T03:07:58.738597401+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes version 2>/dev/null; hermes update --status 2>/dev/null | head -10; cat /[...redacted 90 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e722fbe9-8c77-4d1c-b4af-e808772be7b0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:08:10.553219308+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes status 2>/dev/null | head -40; echo \"---\"; hermes model 2>/dev/null | hea[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"838f187e-e875-4541-ab59-573bf1426b6b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:08:21.539412596+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes status 2>/dev/null | tail -60","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b8c3ee6-511c-441c-bf0a-9d706de32e42","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:08:30.973734743+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["pipe_to_interpreter","pipe_to_interpreter"],"command_redacted":"hermes pairing list 2>/dev/null; cat ~/.hermes/auth.json 2>/dev/null | python3 -[...redacted 350 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0194aae8-d69e-4ea3-b189-cb939027ba8d","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter","pipe_to_interpreter"]}
{"timestamp":"2026-06-12T03:11:06.827546547+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/state.db 2>/dev/null | head -1; sqlite3 ~/.hermes/state.db \"SELECT[...redacted 216 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1ba1104d-7202-49e8-9717-595f0045d786","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:11:14.781221044+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport sqlite3, json\nconn = sqlite3.connect('/root/.hermes/state.db[...redacted 360 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"11e8a702-bfe7-492f-9e13-2c12903be5b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:11:24.369180030+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/ 2>/dev/null; echo \"---\"; ls ~/.hermes/profiles/default/skil[...redacted 75 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"77dd4812-98e6-48bb-baac-824c9a796d3e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:11:32.633961042+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/config.yaml | grep -A 20 \"^mcp\"; echo \"---\"; cat ~/.hermes/config.[...redacted 139 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ea07ffc1-1303-4116-8615-bd2d746277c1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:11:42.293285858+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"npx airtable-mcp-server --help 2>/dev/null | head -5; echo \"---MCP_TEST---\"; AIR[...redacted 172 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f1acbc90-8334-4473-993d-adf734e4f9e4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:11:59.357179717+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s -H \"Authorization: Bearer patIQTejsB6G3elZs.f6a42ac8372935a2ec356debd00e[...redacted 251 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e2219ae1-1537-489e-b61c-522bd9047253","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-12T03:12:19.625694097+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json\nreq = urllib.request.Request(\n    'http[...redacted 348 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"74f2bbce-25f5-4b5a-ac2a-b8aeb7f6b1e9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:12:28.319282906+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/memories/memory.md 2>/dev/null | head -80; echo \"---USER---\"; cat [...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"79b95822-6725-49ae-b5fa-20695b11a182","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:12:33.811537397+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/memories/ 2>/dev/null; echo \"---\"; ls ~/.hermes/kanban/ 2>/dev/null[...redacted 46 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e4c5208-e9ee-43f8-a414-df94bda4c851","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:24:13.257418479+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/config.yaml | grep -A 30 \"^telegram:\"; echo \"---\"; cat ~/.hermes/c[...redacted 74 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"abd7d2c6-b354-4806-9cdd-bbbf23344aa1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:24:27.730583790+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes config set telegram.allowed_chats '7377499346' 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e7e9c0e9-7709-40df-8b4d-a6b540355aa0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:24:36.793549844+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"chmod 600 ~/.hermes/.env ~/.hermes/config.yaml ~/.hermes/google_token.json && ls[...redacted 69 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7717a316-861e-4d84-862a-f3b66686eb2b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:24:41.840948478+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes config set approvals.mode ask 2>&1; hermes config get approvals.mode 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a45e6acf-f3bf-4ac7-8472-ddbc75edd539","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:24:47.773177597+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -A 5 \"^approvals:\" ~/.hermes/config.yaml | head -8","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4a6b6c14-cc96-4b9b-8db2-b0c4e1772e84","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:24:59.140081476+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes update 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"299979f4-a4ef-4cfc-9076-8e081e345a1c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:27:17.043027113+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes version 2>/dev/null; git -C /usr/local/lib/hermes-agent log --oneline -3 [...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ebe48b96-5530-41ee-ab66-68d06c0ae418","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:27:30.820334953+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/.env ~/.hermes/config.yaml ~/.hermes/google_token.json 2>/dev/n[...redacted 236 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d3d6d080-ed68-43b1-91c3-03310e652cd5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:30:15.680525783+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes version 2>/dev/null; ss -tlnp | grep 9119; grep \"allowed_chats\" ~/.hermes[...redacted 12 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14153032-d3fa-40ba-8eab-f2023a565ae1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:30:34.540281289+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes dashboard --host 100.116.48.82 --port 9119 --no-open","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"89720038-7599-4ac8-8c5e-52d27c72f6d0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:30:41.523983227+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink"],"command_redacted":"sleep 3 && ss -tlnp | grep 9119 && curl -s -I http://100.116.48.82:9119 2>&1 | h[...redacted 6 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc736bd5-650a-44d3-b041-66348060c280","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink"]}
{"timestamp":"2026-06-12T03:48:12.469941133+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"systemctl status hermes-gateway 2>/dev/null | head -10; systemctl status hermes-[...redacted 63 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e319ac98-7ebc-488d-9b4b-78c707b13c0c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:48:23.857274912+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"systemctl cat hermes-gateway 2>/dev/null; echo \"---\"; systemctl show hermes-gate[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d37de00-1788-4e49-9188-de910984cf3d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:48:39.033435318+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat > /etc/systemd/system/hermes-dashboard.service << 'EOF'\n[Unit]\nDescription=H[...redacted 506 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2ba2c277-b078-43d8-9a50-1453fb323df5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:48:52.694302892+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"kill 4034656 2>/dev/null; sleep 1; systemctl start hermes-dashboard && systemctl[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed156c6c-04be-44bd-ad53-b7781a32fb87","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:48:59.397686349+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"kill $(pgrep -f \"hermes dashboard.*9119\") 2>/dev/null; sleep 1; systemctl start [...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"029dcda1-2bae-48c6-b3e1-09081fb4cee2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:52:19.346369614+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"systemctl start hermes-dashboard 2>&1; sleep 4; systemctl status hermes-dashboar[...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"aeaa4738-449f-48fe-a3e5-18f308b06054","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:52:30.588107486+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["raw_ip_url","plain_http_to_sink"],"command_redacted":"ss -tlnp | grep 9119; curl -s -I http://100.116.48.82:9119 2>&1 | head -8","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc4daa9f-5cd0-4333-80d3-b75d7ad78da8","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["raw_ip_url","plain_http_to_sink"]}
{"timestamp":"2026-06-12T03:52:45.636293179+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"systemctl enable hermes-dashboard 2>&1; systemctl is-enabled hermes-dashboard","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7524e86-6cd0-4011-803e-43dc921b3288","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T03:59:54.707932283+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep hermes-health-snapshot | grep -v grep; echo \"---\"; ls -la /usr/loc[...redacted 113 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6a045641-6cdb-403d-a165-c34c610679a6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:00:01.658959822+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -E 'health|snapshot' | grep -v grep; cat /etc/cron.d/hermes-health[...redacted 112 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"565ba76a-1443-4217-afe3-1d193e86c9c1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:00:14.151809696+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/CuratorQueue 2>/dev/nu[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c8e537a6-0777-467d-a500-499a73985a9e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:00:21.998367422+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep -E 'health|snapshot' | grep -v grep; pgrep -a health-snapshot 2>/d[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"63c2ba98-8b4a-4d25-b048-8fbffacd3980","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:00:31.152479400+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat /usr/local/bin/hermes-health-snapshot.sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c9b8a387-7c0d-46b6-87cc-cae538170271","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:00:47.203179148+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps -o pid,ppid,etime,cmd --pid 2131286 2>/dev/null; ps --ppid 2131286 2>/dev/nul[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f8e2d6d7-b469-4ae8-98e9-fc457f650126","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:00:53.285316394+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps -o pid,etime,cmd --pid 2131280 2>/dev/null; cat /proc/2131280/cmdline 2>/dev/[...redacted 68 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b948629a-92aa-4418-8e87-a5d3f3cb4048","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:01:29.172049948+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps -o pid,ppid,etime,state,cmd --pid $(pgrep -d',' -f hermes-health) 2>/dev/null[...redacted 89 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"40ae3080-3353-41eb-b5d8-77ddcc646797","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:01:45.157277030+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"find /home/ccuser/rateright-growth/HQ-Vault/ -name \"CuratorQueue*\" -o -name \"*cu[...redacted 146 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e5398415-12a5-4a53-94de-58625d7089c8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:02:47.333234366+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/_System/CuratorQueue.md 2>/dev/null |[...redacted 48 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16cc6c99-e614-46ef-9f3a-a5e23e9afc3b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:02:54.222360496+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/rateright-growth/HQ-Vault/_System/CuratorQueue.md 2>/dev/null |[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d4fd533a-32cd-45c1-a25f-2db12029188d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:03:02.273739106+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"tail -50 /home/ccuser/rateright-growth/HQ-Vault/_System/CuratorQueue.md 2>/dev/n[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"188f23b5-81ca-425d-af36-a68a6fcd778b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:03:29.902874604+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"tail -20 /home/ccuser/opsman-work/health-log/2026-06-11.md 2>/dev/null; echo \"--[...redacted 71 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"188e403a-2082-4e41-a229-a2f3954f7753","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:08:54.964011413+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"kill 2131286 && sleep 1 && ps -p 2131286 2>/dev/null && echo \"STILL RUNNING\" || [...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f576a8a6-5fd7-4f8b-866b-7b88f3d55c62","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:09:04.835349265+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.hermes/google_token.json | python3 -c \"import json,sys; t=json.load(s[...redacted 118 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ac804025-2492-415c-b468-e748fdbd2342","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-12T04:09:23.161537773+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/google_token.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3ea2bee-aa2a-400a-a45e-0ea2f0fd9901","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:11:06.341745106+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"/usr/local/bin/hermes-health-snapshot.sh && sleep 1 && ls -la /home/ccuser/opsma[...redacted 90 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"790eb162-aed9-42c6-9ff2-f18eb8436c82","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:14:22.482792327+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"source /root/.hermes/.env 2>/dev/null; echo \"MINIMAX_API_KEY set: $(test -n \"$MI[...redacted 338 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bbf2f768-10a5-49d6-b1d8-e48e8e32068d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:14:50.118641782+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"rm -f /run/hermes-health-snapshot.lock /run/hermes-health-snapshot.pid; /usr/loc[...redacted 54 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e4f5cd3b-07ea-4090-8f26-5b9b297622a3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:15:29.627047018+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"timeout 5 journalctl -u hermes-gateway.service --since \"24 hours ago\" --no-pager[...redacted 95 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c7e8d534-73c9-4f83-8345-99c5ad601c7f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:15:42.375223973+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"bash -x /usr/local/bin/hermes-health-snapshot.sh 2>&1 | head -40","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a558ae6d-fa10-4fba-9ae0-39795b8e6380","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:15:55.971722497+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"bash -x /usr/local/bin/hermes-health-snapshot.sh 2>&1 | grep -E '^\\+ (echo|curl|[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"59015264-a551-4048-a70c-47408b5793e8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:16:39.869300867+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ccuser/opsman-work/health-log/2026-06-12.md 2>/dev/null && echo \"FI[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"154d15af-c40b-4ae7-a4be-99183b8e3d0a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:17:01.109329114+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"rm -f /run/hermes-health-snapshot.lock /run/hermes-health-snapshot.pid; /usr/loc[...redacted 49 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ad0167fe-7271-4d4d-8975-301c4e09b74c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:18:09.342715868+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep hermes-health | grep -v grep","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"850df70b-cb2f-44fa-8f15-32f805570512","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:18:18.390439783+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"ls -la /home/ccuser/opsman-work/health-log/2026-06-12.md 2>/dev/null && wc -c /h[...redacted 47 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"71aa0105-e3cf-42d6-a2ed-3a6b66de719e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:18:25.261969667+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"echo alive; date","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c74cfa3a-e7ba-479a-860b-24aadff972c1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:18:55.604990567+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"timeout 20 /usr/local/bin/hermes-health-snapshot.sh 2>&1; echo \"exit: $?\"; ls -l[...redacted 88 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"15f58dbe-8cd7-42f9-9487-5aac65606382","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:19:34.505191690+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"pm2 list --no-color 2>/dev/null | grep -E \"online|stopped|errored\" | wc -l; echo[...redacted 15 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e2389826-1503-49ee-b0cb-80beaa4d5390","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:19:53.850431033+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"timeout 5 pm2 list --no-color 2>&1; echo \"pm2 exit: $?\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f67d2bbf-f7e4-41aa-8337-171838d02d68","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:20:10.456330856+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"timeout 5 pm2 jlist 2>&1 | head -3; echo \"exit: $?\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"436aff0c-3edb-4b6a-ba61-a4469a4e70df","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:20:46.560183224+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"timeout 20 /usr/local/bin/hermes-health-snapshot.sh 2>&1; echo \"script exit: $?\"[...redacted 129 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d24361ea-b72a-497f-b7cf-e52250775065","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T04:21:16.367010500+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat /home/ccuser/opsman-work/health-log/2026-06-12.md | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3260e4e7-d0c3-40e6-8143-e720c6857276","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:42:44.785678351+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/root/.hermes/google_token.json') as f:\n    [...redacted 202 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3ad7266f-994f-4081-a4bc-eded4e148b68","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:42:54.577269226+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 /usr/local/lib/hermes-agent/setup.py --auth-url 2>&1 | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bf385260-1ebf-4b41-bb36-206f6b7b0b4f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:42:59.120478620+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 /usr/local/lib/hermes-agent/setup.py --help 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1fd9d592-8dea-4b85-a985-bcb940dce248","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:43:04.288848812+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"auth_url\\|oauth\\|google\" /usr/local/lib/hermes-agent/src/ --include=\"*.[...redacted 29 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fc5f6644-6e58-4d06-96c7-dc6277356f77","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:43:12.227859552+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"find /usr/local/lib/hermes-agent -name \"*.py\" | xargs grep -l \"auth_url\\|google_[...redacted 35 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"963c3580-a454-4deb-9cd8-ebeb1addf87c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:43:39.848533207+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -A5 \"auth_url\\|authorization_url\\|google_auth\" /usr/local/lib/hermes-agent/[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"12db90da-2559-4435-8ca2-ca21cfe75433","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:43:59.031783578+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes --help 2>&1 | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"177ee87c-e8ee-48af-af86-a85af91240b9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:44:21.640284272+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes auth --help 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ee4416aa-d7a4-462f-b1e5-5bf46e8da8d9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:44:36.839045946+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes auth status 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6226e5ad-73e4-4af1-a087-d492e8697534","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:44:43.010244061+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"hermes auth status google 2>&1; echo \"---\"; hermes login --help 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a5d7e27a-2c1a-4cd8-ad22-8709fe240e0b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:45:05.720646658+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"google\\|oauth\\|callback\\|client_id\" /root/.hermes/config.yaml 2>/dev/nu[...redacted 13 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"47bd17c7-b075-4263-a1b4-8e5fdfef0a6f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:45:29.884349179+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json 2>/dev/null | python3 -c \"import json,s[...redacted 133 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"31ce66c2-91ba-4210-86e4-c213bb17866d","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-12T05:45:41.074666860+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"890850960489\\|client_id\\|googleapis.com\" /root/.hermes/ /usr/local/lib/[...redacted 84 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"00391901-7f57-40d1-861f-14520581d2fc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:46:06.902004376+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"find /root/.hermes -name \"setup.py\" -not -name \"*.bak*\" 2>/dev/null; find /root/[...redacted 65 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"20886930-5584-407f-bf82-b73aa58af513","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:46:16.524563722+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -A3 \"SCOPES = \\[\" /root/.hermes/profiles/siteops/skills/productivity/google[...redacted 38 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5638e1a0-03b1-427f-9351-b6d89135379d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:46:28.709539522+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"google\\|gmail\\|calendar\" /usr/local/lib/hermes-agent/tools/mcp_oauth.py[...redacted 23 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"055d6234-1307-4521-bd60-4270595755bb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:46:33.147371438+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"find /usr/local/lib/hermes-agent -name \"google_oauth.py\" 2>/dev/null | head -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b993a7bf-d070-4ea9-b048-c157920d7bf4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:46:39.161498635+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -A5 \"scopes\\|SCOPES\\|gmail\\|calendar\\|readonly\" /usr/local/lib/hermes-agent[...redacted 45 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"36f43d97-b321-41d3-9dc8-0814b3411d6a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:50:48.557232267+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"file /root/.hermes/image_cache/img_f4f4bf104178.jpg; wc -c /root/.hermes/image_c[...redacted 25 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b7f330a2-80c0-4143-b5a4-c67159fad658","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:51:09.021977550+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"grep -r \"OPENAI_API_KEY\\|sk-proj\" /root/.hermes/config.yaml /root/.hermes/.env 2[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"70eef5a3-04f2-4708-bd26-d799e693f068","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:54:23.206412646+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"gcloud projects list 2>/dev/null | head -20; echo \"---\"; ls /root/.hermes/*.json[...redacted 52 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f43be21e-a274-45ed-9c45-f3514c7b1007","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:54:42.308738529+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"cat /root/.hermes/google_client_secret.json","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c15a7578-eca0-47d8-9398-e02e9aa6523e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:57:44.805847532+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 /root/.hermes/profiles/siteops/skills/productivity/google-workspace/scri[...redacted 105 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"38c0b48d-e1d2-4cee-93b3-76b8e31fbe93","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:58:01.912200377+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 /root/.hermes/profiles/siteops/skills/productivity/google-workspace/scri[...redacted 28 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e58f06b4-d8a8-49f9-bc8c-ebbf8355079c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:58:31.347102702+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 /root/.hermes/profiles/siteops/skills/productivity/google-workspace/scri[...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"12bee019-5ed8-4f9d-872f-cd967fce5567","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T05:59:10.046980892+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.parse\nparams = {\n    'response_type': 'code',\n    'cl[...redacted 393 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"84137fc9-fd25-434b-8638-7d1ccc2888b4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:00:36.878064120+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request\nimport urllib.parse\nimport json\n\nclient_secre[...redacted 798 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d31a8521-cf61-4001-906d-a7047eaf10ee","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:00:48.719348023+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json\n\nclient_secret = json.load(open('/root/[...redacted 595 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"54f37f64-fdc4-44c8-9093-3c0f77612a68","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:01:06.456190180+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.hermes/google_token.json | python3 -c \"\nimport json, sys\nt = json.loa[...redacted 484 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3741b974-39e4-4be8-8b70-b081abc3eee9","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-12T06:01:23.465341046+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, urllib.parse, json, hashlib, base64, os, sec[...redacted 1185 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ed4d1186-4ded-4f7d-94d9-86306d87c0f1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:02:16.470312192+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, urllib.parse, json\n\nclient_secret = json.loa[...redacted 874 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"079d7922-864a-4a16-8afe-3c49745bd9c4","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:02:32.468753273+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, urllib.parse, json\n\nclient_secret = json.loa[...redacted 872 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3b49f7d7-cd49-479e-9519-8fb12d09597a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:02:50.278587331+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.parse\nparams = {\n    'response_type': 'code',\n    'cl[...redacted 391 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"617a1c64-66dc-4d79-a74e-0b3b7a0c3645","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:04:43.399044736+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://oauth2.googleapis.com/v2/tokeninfo?client_id=890850960489-5hejo[...redacted 67 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"361069df-0531-4c44-8b64-aaa76c4fa898","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:05:05.774708420+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://oauth2.googleapis.com/tokeninfo\" \\\n  -H \"Content-Type: applicat[...redacted 127 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"64b81edc-bf7d-4747-85d6-50dfe42c17c1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:05:30.352987418+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, urllib.parse, json, hashlib, base64, os\n\n# G[...redacted 950 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1a49b455-d76c-4b6a-bc59-1241ac1a5f87","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:06:59.974628827+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, urllib.parse, json\n\nclient_secret = json.loa[...redacted 675 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fb14e138-c62c-4e05-a9fa-df301cf8e277","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:07:14.032261280+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, urllib.parse, json\n\nclient_secret = json.loa[...redacted 794 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b736dd56-7d73-433a-9f69-cab8d7f9e140","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:07:38.976268251+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, urllib.parse, json\n\n# Read the existing toke[...redacted 1222 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"848922ca-3b36-4d37-8d9e-23b113f11560","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T06:08:08.475679731+00:00","session_id":"b9bcaa0a-b61b-4fb6-b188-11f623037894","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport urllib.request, json, time\n\nclient_secret = json.load(open('[...redacted 1426 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21db70c1-6709-4e80-957b-54b170af8b51","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:33:27.118228003+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/ && echo \"---\" && ls ~/.hermes/skills/.archive/ 2>/dev/null [...redacted 26 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23f0cae0-511f-4a2e-a29d-635db1cd4931","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:33:36.317169179+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ | grep -E \"codex|opencode|apple|findmy|imessage\" &[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d4d72f0a-436f-4a8d-bccc-96108b207c29","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:33:51.883670716+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ | grep -iE \"codex|opencode|apple|findmy|imessage\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1feed158-a627-4b13-80f2-0813820e6117","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:34:06.066484257+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/skills/autonomous-ai-agents/ 2>/dev/null && echo \"---\" && ls -l[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f84f4927-3ba2-4ea6-aa3b-acd8eb8bfc7e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:34:18.786938252+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/skills/apple/ && echo \"---\" && ls ~/.hermes/skills/ | grep -v D[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"788e1696-6d85-47c8-92e7-a2e56300330a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:34:29.887242389+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills/ -maxdepth 2 -name \"SKILL.md\" | grep -v archive | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"dae4adca-61c6-4cae-a35a-9c7e490e3cd0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:34:43.230608767+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills/autonomous-ai-agents/ -type d | sort && echo \"---\" && find[...redacted 39 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33595e46-4d9f-44a6-880e-7f435f883385","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:35:20.518357756+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/apple/ && echo \"---\" && ls ~/.hermes/skills/autonomous-ai-ag[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9f20f11d-c3f2-4a3a-8de0-9ee6cd7f1ff1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:35:27.485614103+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills/ -name \"SKILL.md\" -not -path \"*/\\.*\" | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"95b20a93-788d-46e8-ac43-152f3c56c6c8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:35:32.390141876+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -name \"SKILL.md\" 2>/dev/null | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2570edcf-1504-4eaf-806d-88c3a4867955","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:35:55.482122625+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4fe7d97a-00b6-4278-8086-cec75d8e77b6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:36:22.881609563+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/autonomous-ai-agents/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"92a433b3-1e0c-46cc-872b-f4e83ee0bc0e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:36:38.030296787+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills/.backup -name \"*codex*\" -o -name \"*opencode*\" 2>/dev/null [...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"140f4c60-3bd6-458a-9223-154fa61fcad9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:36:43.151762932+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find /root/.hermes -name \"*codex*\" -not -path \"*/.archive/*\" 2>/dev/null | head [...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9d852bed-89cd-42f5-a65d-146512fafad9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:36:54.049347401+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/skills/autonomous-ai-agents/codex 2>/dev/null && echo \"exists\" [...redacted 24 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2633d6b1-1e54-42e8-973c-4dce5688f9f6","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:37:05.925209936+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/apple/ && echo \"---\" && ls ~/.hermes/skills/autonomous-ai-ag[...redacted 5 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c0befac9-3242-4867-9404-35a0e34ba902","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:37:15.935331430+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/profiles/default/skills/ 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b04ed427-68c4-4533-99a0-2c167142a5f0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:37:30.020389835+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 1 -type d | sort | while read d; do echo \"$d: $([...redacted 64 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"360bb313-1078-4d40-92e6-34e38264fe2a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:37:45.838411312+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ | sort","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fb2571cc-e447-4ad5-b28f-cd0271ab8511","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:38:38.864598103+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.curator_backups/2026-06-12T09-28-54Z/ | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f08367a-4239-4121-af17-0185d8ee9b24","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:38:54.936497099+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ | grep -c .","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"14e5f463-fb45-4348-8ba6-244f89689e3a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:39:15.092889031+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/ | grep -v \"^apple$\" | cat && echo \"---apple---\" && ls ~/.he[...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b31fe07a-c5bb-4c9b-aa89-e3ba6ec68df0","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:39:28.684143574+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/profiles/default/skills/ 2>/dev/null | head -20 || echo \"no default[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"13b10e9d-bcc4-46fd-ba1c-2e6bec13f47e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:39:51.395266951+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/.archive && for skill in apple-notes apple-reminders f[...redacted 343 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e6ef881-06fa-45ac-8b9a-123e76d308c2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:40:28.708478340+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes -name \"SKILL.md\" -path \"*/autonomous-ai-agents/*\" 2>/dev/null | s[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f491867e-7f1c-472e-9d7e-28e09562ae8d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:41:02.427227549+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"wc -c ~/.hermes/skills/autonomous-ai-agents/claude-code/SKILL.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5f5f4e9e-771c-4549-ba92-3a262efb7ffb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:41:19.818467813+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"grep -n \"Other Coding Agents\\|### Codex CLI\\|### OpenCode CLI\" ~/.hermes/skills/[...redacted 41 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"418eea09-6c2c-441f-bfbf-1da5a5d6e69c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:41:48.891514192+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 2 -name \"SKILL.md\" -not -path \"*/.archive/*\" -no[...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e3394fd9-2354-49a9-a2e0-659cd4ed7671","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:41:56.364532485+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 2 -name \"SKILL.md\" -not -path \"*/.archive/*\" -no[...redacted 50 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a90e5183-dea6-4282-ba7b-d84e67f1a025","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:42:06.585319022+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"find ~/.hermes/skills -maxdepth 3 -name \"SKILL.md\" -not -path \"*/.archive/*\" -no[...redacted 78 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5153b798-39e3-4314-b663-c04e8c5e4cf5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T09:43:07.593640861+00:00","session_id":"cc98b63b-9d72-4268-8ef6-4f758a993a96","action":"Allow","rule_ids":[],"command_redacted":"wc -l ~/.hermes/skills/autonomous-ai-agents/claude-code/SKILL.md && grep \"^## Ot[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"12a9b15f-5ad9-4967-87e0-1f7187ea6f71","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T19:01:10.792360507+00:00","session_id":"cf286221-6382-4864-983b-71158b4835a2","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat ~/.hermes/google_token.json 2>/dev/null | python3 -c \"import sys,json; d=jso[...redacted 171 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"31f6d0ee-bbc2-4ee5-ac09-f6ab9ad05f44","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-12T19:01:28.840263832+00:00","session_id":"cf286221-6382-4864-983b-71158b4835a2","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport time, datetime\nexpiry = 1781248088.168716\nnow = time.time()\n[...redacted 134 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"72034f6a-308e-46b3-bcb0-f9d3636a81c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T19:01:40.346002152+00:00","session_id":"cf286221-6382-4864-983b-71158b4835a2","action":"Allow","rule_ids":[],"command_redacted":"python3 /usr/local/lib/hermes-agent/setup.py --auth-url 2>&1 | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"370e380e-4e1f-4234-9d96-9ec26864b503","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T22:01:12.001996255+00:00","session_id":"cf286221-6382-4864-983b-71158b4835a2","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" --max-time 5 http://localhost:3000 2>/dev[...redacted 27 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"651fbb3b-78f3-423f-b37e-569f15fbc58e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-12T22:01:13.123161253+00:00","session_id":"cf286221-6382-4864-983b-71158b4835a2","action":"Allow","rule_ids":[],"command_redacted":"cat ~/hermes/memories/MEMORY.md 2>/dev/null | grep -i -A3 \"rateright\" || echo \"n[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d0d35aed-ea9e-4636-bf93-480297198f6e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-13T19:00:36.780207894+00:00","session_id":"fc1236f2-ce3a-4d1d-9618-f03ec9815b6d","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"import json, time; t=json.load(open('/root/.hermes/google_token.json[...redacted 91 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0837a102-da77-4ad3-8552-b1d2d6a78011","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T08:00:32.716329016+00:00","session_id":"16e78170-ee8a-495a-b2f8-140e129ddbb5","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep hermes | grep -v grep | awk '{print $11, $10, $1, $2, $8, $9}'","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eda37c06-893b-4045-b9b0-bd1921db596e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T08:00:34.295041439+00:00","session_id":"16e78170-ee8a-495a-b2f8-140e129ddbb5","action":"Allow","rule_ids":[],"command_redacted":"df -h /","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"04b32d6d-fb31-4e23-a914-a628d6fb8fe2","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T08:00:35.652323742+00:00","session_id":"16e78170-ee8a-495a-b2f8-140e129ddbb5","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active hermes-gateway hermes-dashboard","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"97f778f9-c8f8-4faf-aaa5-234331a78078","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T08:00:37.043935666+00:00","session_id":"16e78170-ee8a-495a-b2f8-140e129ddbb5","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git log -1 --format=\"%H %ci\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8026eed9-3c81-44eb-8273-4cae89db4e7d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T08:00:38.295203652+00:00","session_id":"16e78170-ee8a-495a-b2f8-140e129ddbb5","action":"Allow","rule_ids":[],"command_redacted":"wc -c ~/.hermes/memories/MEMORY.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"344b7622-bffd-47f3-99ca-b3c6f3ea2726","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T08:00:48.613252600+00:00","session_id":"16e78170-ee8a-495a-b2f8-140e129ddbb5","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep hermes | grep -v grep | awk '{print $2, $11}' | while read pid cmd[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"25cb12b2-2013-4ea5-919f-d12ca52590a9","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T19:00:30.795583161+00:00","session_id":"bda25308-12d5-45b2-b2a0-4d2a53420b0d","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/google_token.json 2>/dev/null && echo \"---TOKEN-OK---\" || echo \"--[...redacted 18 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"972e0e4a-8929-4d4d-97f6-35155614cf1c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T19:00:42.602402195+00:00","session_id":"bda25308-12d5-45b2-b2a0-4d2a53420b0d","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 10 -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3[...redacted 348 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3c6a0c50-4f35-4cd4-b525-14d1c7fc1b1d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-14T19:00:44.377556963+00:00","session_id":"bda25308-12d5-45b2-b2a0-4d2a53420b0d","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 10 -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3[...redacted 437 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7bfdf083-ff71-436c-866f-d0f3d16e3a39","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T19:00:51.208297097+00:00","session_id":"fa84ce3e-36b8-4df4-ab93-97fe9d80f623","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3A5Qf7iP6mF_gEd[...redacted 468 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17d48372-a019-459f-aa09-5e8df49574b0","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-15T19:01:25.190675453+00:00","session_id":"fa84ce3e-36b8-4df4-ab93-97fe9d80f623","action":"Allow","rule_ids":[],"command_redacted":"cd /root && python3 << 'EOF'\nimport json\nimport urllib.request\nimport urllib.par[...redacted 1784 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"02b3a6b8-1230-443b-a9f9-760f9c6fdf9a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T19:01:39.834100009+00:00","session_id":"fa84ce3e-36b8-4df4-ab93-97fe9d80f623","action":"Allow","rule_ids":[],"command_redacted":"cat > /root/fetch_gmail_calendar.py << 'SCRIPT'\nimport json\nimport urllib.reques[...redacted 1785 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"689955d7-afc7-4a8b-a4e4-1dee692553f6","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-15T19:01:42.289238498+00:00","session_id":"fa84ce3e-36b8-4df4-ab93-97fe9d80f623","action":"Allow","rule_ids":[],"command_redacted":"python3 /root/fetch_gmail_calendar.py","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"b88f58b9-24e2-4c3d-b594-8a4d049ceb6d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:32:49.670329811+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/ 2>/dev/null && echo \"---\" && ls /home/ccuser/opsman[...redacted 34 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b10f325-1124-4505-9e81-9bf74a5e9d39","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:00.500879717+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"grep -A 10 \"audio_understanding\\|transcri\\|whisper\" /root/.hermes/config.yaml 2>[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"92527707-4dc5-4c4f-bbf6-7fb75a699fb1","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:01.652679186+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/opsman-work/daily/ | sort | tail -10","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"513a0a7e-70a4-47f8-ab2b-ac64ef7fca73","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:02.915576958+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/ 2>/dev[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"704af4f9-8efb-4903-8e43-a357377bcc24","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:11.725770400+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"grep -B2 -A15 \"^transcription\\|^whisper\\|^tts:\\|^stt:\\|^audio\" /root/.hermes/con[...redacted 145 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c3a03d79-3083-4d1c-8434-dbfc90a45b9c","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:12.821015121+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"ls /home/ccuser/rateright-growth/HQ-Vault/11_OpsMan_LFCS/Operations/Jobs/Ongoing[...redacted 19 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"86afd226-1e42-4a00-9579-f8ba3215d012","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:40.739099273+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"grep -B2 -A8 \"whatsapp\\|voice\" /root/.hermes/config.yaml 2>/dev/null | grep -v \"[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d30dcedf-3d54-4f99-aee8-871f0871c7d5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:56.825056712+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Allow","rule_ids":[],"command_redacted":"# Check daily folder dates and content\nls -la /home/ccuser/opsman-work/daily/ | [...redacted 251 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5d1ef938-bee4-46f8-ac21-f93bf3d73015","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-16T03:33:57.976034735+00:00","session_id":"1e861d3f-d76d-4e36-8aea-743c0cdda4c6","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"# Check the openclaw WhatsApp bridge config for voice handling\ncat /root/.clawdb[...redacted 186 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"890a5502-50c1-44b1-94f2-b546a47aeef9","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-16T19:01:07.404438687+00:00","session_id":"1982db02-3700-48da-999f-1bd63adef3c9","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport time, json\nwith open('/root/.hermes/google_token.json') as f[...redacted 141 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6f31042c-ad7e-466a-b22c-5176a5b51fe4","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-17T19:01:00.859267073+00:00","session_id":"d51c466d-477e-47ad-8147-61d044abff0e","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat ~/.hermes/google_token.json | python3 -c \"import sys,json; t=json.load(sys.s[...redacted 92 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"bef24336-5791-42aa-b28e-219b157a030f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-17T19:01:01.929965378+00:00","session_id":"d51c466d-477e-47ad-8147-61d044abff0e","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport time, json, subprocess\nwith open('/root/.hermes/google_token[...redacted 210 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"43119f3c-f410-46e4-a57e-77cafd4a649d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:01:03.199643451+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/google_token.json 2>/dev/null && echo \"---TOKEN_VALID---\" || echo [...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"eabdac8e-ab10-4fa3-8548-a8be298b0cbc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:01:12.329432318+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 15 -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3[...redacted 387 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9df09183-4541-4901-bbe3-db4b202eb05a","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:01:18.686044778+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 20 -X POST https://oauth2.googleapis.com/token \\\n  -H \"Conten[...redacted 327 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"77819564-3653-4149-a454-8347708cf76d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:01:25.794563283+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 15 -H \"Authorization: Bearer ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv[...redacted 387 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c493d63-2cd8-43af-bcea-56ceb0ee4c32","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:01:43.469340407+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"TOKEN=\"ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv_2NMcYnFSSVElOZL9qZOPTGDcWjGstOk1sGIiLeAm[...redacted 375 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fe5bf557-79e7-4770-9175-92be9e7c18dd","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:01:52.323938612+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"TOKEN=\"ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv_2NMcYnFSSVElOZL9qZOPTGDcWjGstOk1sGIiLeAm[...redacted 375 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6c69e7dc-6ca6-45fc-9d1b-be6318bd0276","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:02:04.055114639+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"TOKEN=\"ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv_2NMcYnFSSVElOZL9qZOPTGDcWjGstOk1sGIiLeAm[...redacted 375 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca1018c2-51f9-45d3-b7c2-e1eee363ee27","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:02:11.936762764+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"TOKEN=\"ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv_2NMcYnFSSVElOZL9qZOPTGDcWjGstOk1sGIiLeAm[...redacted 375 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"01005002-ff60-4393-8cba-a45bbc5ba29d","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:02:20.085546017+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"TOKEN=\"ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv_2NMcYnFSSVElOZL9qZOPTGDcWjGstOk1sGIiLeAm[...redacted 375 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5378b1ba-3d35-48b1-8ffb-f43d22c1a413","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:02:28.880325198+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"TOKEN=\"ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv_2NMcYnFSSVElOZL9qZOPTGDcWjGstOk1sGIiLeAm[...redacted 375 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"687ee14c-d3ab-4987-9d91-9685c94d25d1","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:02:39.113567170+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"TOKEN=\"ya29.a0AT3oNZ8ecf39U-0Q5lVmJF6Zv_2NMcYnFSSVElOZL9qZOPTGDcWjGstOk1sGIiLeAm[...redacted 513 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c9dee298-b65d-477b-b65a-0361f74a52bc","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-18T19:02:43.977834918+00:00","session_id":"fca4de4c-df60-4a3a-afbc-1ff48d5b55e3","action":"Allow","rule_ids":[],"command_redacted":"cat ~/.hermes/memories/MEMORY.md 2>/dev/null | grep -A 50 -i \"follow\\|waiting\\|c[...redacted 31 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"287c5b3e-47a8-41b0-8d44-3390074bd853","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:32:18.880148536+00:00","session_id":"ca1c3912-243b-445a-b6c8-8939033adebd","action":"Allow","rule_ids":[],"command_redacted":"mkdir -p ~/.hermes/skills/.archive/","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ae053f57-3812-47a6-8079-8c1d4752eb94","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:33:31.098084133+00:00","session_id":"ca1c3912-243b-445a-b6c8-8939033adebd","action":"Allow","rule_ids":[],"command_redacted":"cd ~/.hermes/skills && mv software-development/test-driven-development software-[...redacted 131 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"1f10b761-7fd7-4cf5-9a91-c65dd77240bc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:33:36.595694711+00:00","session_id":"ca1c3912-243b-445a-b6c8-8939033adebd","action":"Allow","rule_ids":[],"command_redacted":"ls ~/.hermes/skills/.archive/ 2>/dev/null && echo \"---\" && ls ~/.hermes/skills/s[...redacted 32 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7d6429e1-dd8f-413d-8b3a-013d8087d5d8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:33:49.308338844+00:00","session_id":"ca1c3912-243b-445a-b6c8-8939033adebd","action":"Allow","rule_ids":[],"command_redacted":"mv ~/.hermes/skills/macos-computer-use ~/.hermes/skills/.archive/ 2>/dev/null; e[...redacted 33 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7eab74c3-827e-4121-a104-fd3e825b6f74","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T09:34:32.288172424+00:00","session_id":"ca1c3912-243b-445a-b6c8-8939033adebd","action":"Allow","rule_ids":[],"command_redacted":"mv ~/.hermes/skills/creative/sketch ~/.hermes/skills/.archive/ && echo \"sketch a[...redacted 8 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6eb0f819-7819-42c7-ae48-de21a0c9be99","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T19:01:11.734189993+00:00","session_id":"906feddb-d177-4b9f-943f-453d88f8acd5","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat ~/.hermes/google_token.json 2>/dev/null | python3 -c \"import sys,json; t=jso[...redacted 83 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"50effd7b-71a0-43df-874b-15b3a8fcd95e","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-19T19:01:15.099206392+00:00","session_id":"906feddb-d177-4b9f-943f-453d88f8acd5","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/.hermes/google_token.json 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"940886fa-abae-45e5-844c-ea4271a3582f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T19:01:30.489464995+00:00","session_id":"906feddb-d177-4b9f-943f-453d88f8acd5","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 10 -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3[...redacted 340 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a10060c1-c142-4341-a0d7-fed60cca2f13","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T22:01:14.871251866+00:00","session_id":"906feddb-d177-4b9f-943f-453d88f8acd5","action":"Allow","rule_ids":[],"command_redacted":"pm2 list 2>/dev/null | grep -E 'rateright|app' || echo \"PM2 check failed\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"3443ebe7-1700-45e3-9af6-b332fcf57da9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-19T22:04:16.231278811+00:00","session_id":"906feddb-d177-4b9f-943f-453d88f8acd5","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"%{http_code}\" http://localhost:3000 --max-time 5 2>/dev[...redacted 20 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7977b87d-5703-48e5-a8a2-269e035c9272","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-20T19:00:54.287623785+00:00","session_id":"516b4b8d-27e8-46ef-9653-3ca6f88e5acf","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json, time\ntoken = json.load(open('/root/.hermes/google_toke[...redacted 117 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33e08f73-e050-42ed-ab7a-850c0a285aa8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T08:00:51.658447821+00:00","session_id":"12b4a7ba-ded7-40f5-89fe-dafcab3316c6","action":"Allow","rule_ids":[],"command_redacted":"ps aux | grep hermes | grep -v grep","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90cbfe91-be7f-4ec1-8e60-fec5424ab695","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T08:00:52.937515789+00:00","session_id":"12b4a7ba-ded7-40f5-89fe-dafcab3316c6","action":"Allow","rule_ids":[],"command_redacted":"df -h /","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c36458e1-8a71-4e1a-ae6c-b30700631816","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T08:00:54.076293315+00:00","session_id":"12b4a7ba-ded7-40f5-89fe-dafcab3316c6","action":"Allow","rule_ids":[],"command_redacted":"systemctl is-active hermes-gateway hermes-dashboard","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06ec4a0a-da78-40be-a24e-2b4884e5584e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T08:00:55.239843578+00:00","session_id":"12b4a7ba-ded7-40f5-89fe-dafcab3316c6","action":"Allow","rule_ids":[],"command_redacted":"cd /home/ccuser/rateright-growth && git log -1 --format=\"%H %ci\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"352ff5eb-47e5-4b69-9ece-d45a10b40728","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T08:00:56.383769589+00:00","session_id":"12b4a7ba-ded7-40f5-89fe-dafcab3316c6","action":"Allow","rule_ids":[],"command_redacted":"wc -c ~/.hermes/memories/MEMORY.md","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"102351cc-000e-4662-b627-efdde8d40099","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T19:00:57.423027860+00:00","session_id":"09866111-7eee-4341-b14f-3b82c3ce81ef","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat ~/.hermes/google_token.json 2>/dev/null | python3 -c \"import sys,json; t=jso[...redacted 148 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2e176cee-af4e-4f65-afbe-b52423ad4595","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-21T19:01:10.568266810+00:00","session_id":"09866111-7eee-4341-b14f-3b82c3ce81ef","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -s -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3A5Qf7iP6mF_gEd[...redacted 436 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"646c2acd-b7fc-47c8-884f-c2b68d2b8639","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-21T19:01:46.209440879+00:00","session_id":"09866111-7eee-4341-b14f-3b82c3ce81ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 10 -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3[...redacted 364 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ca0a2980-b2dd-4012-9c19-2a8a2149bece","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T19:01:51.218151394+00:00","session_id":"09866111-7eee-4341-b14f-3b82c3ce81ef","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/gmail_result.json') as f:\n    d = json.[...redacted 99 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"71d361e0-a2a2-4fd9-aede-5261c5263374","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T19:01:57.682079232+00:00","session_id":"09866111-7eee-4341-b14f-3b82c3ce81ef","action":"Allow","rule_ids":[],"command_redacted":"curl -s --max-time 10 -H \"Authorization: Bearer ya29.a0AT3oNZ_aHNWDZE50cMOABzL-3[...redacted 463 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f4e6fe55-29ef-4618-881d-00efa326e4ce","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T19:02:04.059136910+00:00","session_id":"09866111-7eee-4341-b14f-3b82c3ce81ef","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json\nwith open('/tmp/calendar_result.json') as f:\n    d = js[...redacted 295 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c56d77c6-84cf-4b0f-b670-742524b62e8f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-21T19:02:14.686951716+00:00","session_id":"09866111-7eee-4341-b14f-3b82c3ce81ef","action":"Allow","rule_ids":[],"command_redacted":"cat /tmp/gmail_result.json | head -c 200; echo; cat /tmp/calendar_result.json | [...redacted 11 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cef8b024-7ff9-410d-a23c-9ccba200f199","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-22T19:01:05.995173310+00:00","session_id":"ba401b82-0131-4457-bb44-9291af00c671","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat ~/.hermes/google_token.json | python3 -c \"import sys,json; d=json.load(sys.s[...redacted 104 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"69b15724-8cde-4d4a-ab96-25d896664f72","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-22T19:01:25.609921647+00:00","session_id":"ba401b82-0131-4457-bb44-9291af00c671","action":"Allow","rule_ids":[],"command_redacted":"python3 -c \"\nimport json, time\nwith open('/root/.hermes/google_token.json') as f[...redacted 185 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"54ed4b5f-1a26-4351-a235-030e6e25997f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:28:53.380712831+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"openclaw channels status 2>&1 | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"529deb01-08e8-44af-96db-45e9827f8a09","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:29:04.712514926+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"systemctl status clawdbot-opsman.service 2>&1 | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4046d09f-9adf-43c4-8b4f-a43cb84c7c7b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:29:15.290135468+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json 2>&1 | python3 -c \"import json,sys; d=j[...redacted 77 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"e413cdf7-ced2-4ace-b4ba-a225b36af653","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-23T05:29:16.536341777+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"ls /root/.openclaw/ 2>&1; cat /root/.openclaw/openclaw.json 2>&1 | python3 -c \"i[...redacted 96 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"78137509-bac5-4ca5-9d8c-ab3bd7eba208","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-23T05:39:20.950249668+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"openclaw channels status --channel whatsapp 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7002ae1b-16ff-46ec-8c16-6e21e4fab160","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:39:24.672801410+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"cat /root/.clawdbot-opsman/openclaw.json 2>&1 | python3 -c \"import json,sys; d=j[...redacted 57 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7159de60-d2b3-4420-a6f1-774c2d1d12ea","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-23T05:39:46.201231231+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"openclaw doctor 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"de5c6dc7-161b-4d81-84d8-e216a871e14a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:49:28.809815412+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/\" 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c58dbde8-314f-4b6d-b3f7-b2f72b0033be","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:49:29.953722902+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"ls \"/home/ccuser/opsman-work/Jobs/Upcoming/\" 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"9416dabc-3f26-4755-af1a-8054e90eca22","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:49:38.795497728+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/01-2275 - HPE Field of Play Horn[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"945d47d3-8a16-4aca-95fd-ddc5b99dfb3f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-23T05:49:39.907946928+00:00","session_id":"af84efba-b795-4be5-b21a-bb796c902da3","action":"Allow","rule_ids":[],"command_redacted":"cat \"/home/ccuser/opsman-work/Jobs/Ongoing Jobs/TBC - Solutions Plus - Bingara G[...redacted 37 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"7ec74ff6-c0cf-41d4-ba9b-79975163533a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}