explain_command
Determine if a command is permitted by the security policy without executing it. Returns the policy verdict for the given command.
Instructions
Dry run: return the policy verdict without executing anything.
stdout/stderr are always empty and exit_code is always None. This function does not reference the executor at all, so it is structurally impossible for it to run a command (see test_explain_command_cannot_execute).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| command | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | Yes | ||
| code | Yes | ||
| stderr | No | ||
| stdout | No | ||
| exit_code | No | ||
| duration_ms | No | ||
| policy_reason | No |