Bash / shell tool

Shell commands run inside the sandbox with the approval gate in ask mode.

Package installs stay fail-closed until egress allowlists are attached (egress.sh enable). Deny does not run the command.