Rules
Rules let you classify shell commands before they run. They are useful for team-level command policy, especially in automation.
Use the existing Exec policy reference for rule syntax and checking commands locally.
Rules complement sandboxing. They do not replace filesystem and network boundaries.