tirith-config

You can intercept shell commands by enforcing Tirith policy checks before execution. This approach evaluates real-time command interception rules to block homograph URLs, ANSI injection, and pipe-to-shell exploits automatically.

Policy-driven shell command interception evaluates global and per-project settings to verify commands before execution. It integrates seamlessly with shell hooks to protect commands in real time by resolving applicable policies and blocking unsafe inputs.

Run the tirith doctor command to verify your shell hook and policy configuration. This validates environment configuration management, hook initialization, and policy loading to ensure controlled execution is active.

Yes, you can define per-project overrides while maintaining global policy resolution. The system merges global and per-project scopes during command interception, allowing customized rules without losing baseline security enforcement.

Shell command audits use audit logs and receipt verification to track accountability and prevent execution exploits. Receipt verification validates commands against policy rules to block homograph, ANSI, and pipe-to-shell attacks before they execute.

Policy checks for real-time command interception require proper hook initialization and environment configuration to function. Without valid global or per-project policy resolution loaded via the doctor command, command auditing and exploit blocking cannot be enforced.