Commands / kosa8 approve check
kosa8 approve check
Show what an action would do and whether it needs approval
Usage
kosa8 check KIND [ARG...]
Classifies an action without running it. KIND is a kosa8 verb (run, exec, rm, rewind) or an assistant tool name (run_container).
Describe the action as it would really happen — including --mount and --egress — because those are what decide the class, not the verb.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
--egress | string | network egress the action would set, e.g. deny or allow:api.example.com | — |
--mount | stringArray | host directory the action would expose into the sandbox | [] |
--policy-edit | bool | the action rewrites governance or approval policy | — |
--sandbox | string | the existing sandbox the action runs inside | — |
--target | string | what it operates on (default: the first argument) | — |
Example
kosa8 approve check run alpine sh -c 'apk add curl' kosa8 approve check --sandbox dev --mount /Users/me/src run node kosa8 approve check rm dev