Command Deny-Lists
Policy enforcement and prohibited command lists in NIKI.
Command Deny-Lists & Security Policies
NIKI parses and validates every shell command generated by agents against a multi-layer security policy before execution.
Global Deny-List
The following commands and patterns are strictly blocked across all agents and backend modes:
- Destructive Filesystem Operations:
rm -rf /,rm -rf ~,mkfs,dd,fdisk - Force Git Mutations:
git push --force,git push -f,git reset --hard origin/main,git branch -D main - Untrusted Pipe Execution:
curl | sh,curl | bash,wget | sh,wget | bash - Bypassing Verification Hooks:
git commit --no-verify,git push --no-verify
Role-Specific Access Policies
Different agent roles operate with distinct filesystem and shell privileges:
| Agent Role | Allowed Operations | Denied Operations |
|---|---|---|
| Planner | Read repository files, inspect manifests | File writes, deletions, shell commands |
| Coder | Edit workspace files, apply unified diffs | Direct git pushes, remote network access |
| Tester | Read files, execute designated test runner | Destructive file modifications outside test fixtures |
| Reviewer | Read-only inspection of diffs and reports | Code modifications, shell execution |