CLI
Permissions and sandbox
Risky commands always ask, and commands can run in a sandbox.
Permission prompts
Deleting files, pushing with git, rewriting history and installing packages ask every time. You can:
- Allow once
- Always allow in this project
- Deny
/permissions
/permissions changes the trust level for the project, or adds allow and deny rules for specific tools.
/sandbox
/sandbox runs the AI’s commands without network access and only writing inside the project. It uses bubblewrap on Linux and Seatbelt on macOS.
/access
/access lists folders outside your project that ZOREVA-UI may use; /access remove <folder> takes one off.
Project files can’t grant permissions
Security
ZOREVA.md and .zoreva/rules are treated as untrusted project context. They can’t change permissions, approve tools or reveal secrets.