{"timestamp":"2026-05-08T13:14:34.267763853+00:00","session_id":"0f156281-fb29-4992-9622-ac5a6ced5669","action":"Allow","rule_ids":[],"command_redacted":"find /home/piyush/.hermes -name \"*.md\" -type f 2>/dev/null | head -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5054e95e-dd8f-400f-8be1-36f8c782c51f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T13:35:33.098316292+00:00","session_id":"aef1852e-2245-44e5-97ea-c49e4262e81b","action":"Allow","rule_ids":[],"command_redacted":"curl -s \"https://share.google/lN2RzgAakl3gu1qT4\" | head -100","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"fd14e376-ed2b-4cb1-a800-1d9e8b0879c0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T13:35:37.098067984+00:00","session_id":"aef1852e-2245-44e5-97ea-c49e4262e81b","action":"Allow","rule_ids":[],"command_redacted":"curl -L -s \"https://www.google.com/share.google?q=lN2RzgAakl3gu1qT4\" | head -200","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f6016fe3-b1e5-44c6-96fe-f588b69b5f5e","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T13:41:03.248354887+00:00","session_id":"aef1852e-2245-44e5-97ea-c49e4262e81b","action":"Allow","rule_ids":[],"command_redacted":"uv pip list | grep -E \"selenium|pandas|openpyxl|webdriver\"","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"606e565c-f8dd-4363-a28e-2fe1f6a0b878","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T13:41:07.260121945+00:00","session_id":"aef1852e-2245-44e5-97ea-c49e4262e81b","action":"Allow","rule_ids":[],"command_redacted":"uv pip install selenium pandas openpyxl webdriver-manager 2>&1 | tail -20","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"cb72e03d-6235-492a-b312-dbd460b4e914","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T13:42:37.216558376+00:00","session_id":"aef1852e-2245-44e5-97ea-c49e4262e81b","action":"Allow","rule_ids":[],"command_redacted":"chmod +x /home/piyush/udise_student_manager.py /home/piyush/udise_data_processor[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ffca5df6-6cf2-4812-bb11-c46d54495ada","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-08T16:35:58.961718775+00:00","session_id":"aef1852e-2245-44e5-97ea-c49e4262e81b","action":"Allow","rule_ids":[],"command_redacted":"uv pip install pillow 2>&1 | tail -5","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"665a9006-e9bf-432f-9d84-5fc8d6ad13a8","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:05:50.728721342+00:00","session_id":"be57fc44-287e-4112-9dad-b23f2cd348f6","action":"Allow","rule_ids":[],"command_redacted":"ss -tlnp | grep 8000; echo \"---\"; curl -s -o /dev/null -w \"%{http_code}\" http://[...redacted 188 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f36278e8-c47a-4bc3-a9c8-81a1263fdd2c","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:06:08.376499269+00:00","session_id":"be57fc44-287e-4112-9dad-b23f2cd348f6","action":"Allow","rule_ids":[],"command_redacted":"cd ~ && python3 -m http.server 8000","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0b3001eb-8dac-47ca-a2ac-cf9733e02d6e","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:06:13.797338435+00:00","session_id":"be57fc44-287e-4112-9dad-b23f2cd348f6","action":"Allow","rule_ids":[],"command_redacted":"sleep 2 && curl -s -o /dev/null -w \"Local HTTP status: %{http_code}\" http://127.[...redacted 10 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f867a02e-f512-4dbc-ac57-561d87447253","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:06:21.943851087+00:00","session_id":"be57fc44-287e-4112-9dad-b23f2cd348f6","action":"Allow","rule_ids":[],"command_redacted":"tailscale funnel --bg 8000 2>&1","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d67d1cbb-90ef-4592-97f5-fd4548dc3836","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:06:27.550503410+00:00","session_id":"be57fc44-287e-4112-9dad-b23f2cd348f6","action":"Allow","rule_ids":[],"command_redacted":"curl -s -o /dev/null -w \"Tailscale Funnel status: %{http_code}\" https://victus.n[...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4b1eebfb-d205-4d8c-a532-46d82fd4331f","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:09:38.034131552+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"cd ~ && cat timetable_data.json 2>/dev/null | head -100","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4dcea3cb-0c70-489e-9366-c9a372785d0f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:09:45.875360464+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"ls -la ~/*.html ~/*.py ~/*.json 2>/dev/null | head -30","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"718e202e-440d-47ca-a850-d3a3d7d16856","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:10:28.965791894+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"find ~ -name \"*timetable*\" -o -name \"*time*table*\" -o -name \"*TT*\" 2>/dev/null |[...redacted 9 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"a3f1d8c4-70f7-439b-a235-daed448a5d64","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:10:39.212882847+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"cd ~ && python3 -c \"\nimport openpyxl\nwb = openpyxl.load_workbook('all_in_one_tim[...redacted 277 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d44cbb27-4c32-4d27-8646-e0a2d69d78eb","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:13:23.956346694+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"cd ~ && python3 -c \"\nimport openpyxl\nwb = openpyxl.load_workbook('time_table_tem[...redacted 287 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"2d609c1f-3242-4cea-b638-340748d6a34a","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:13:43.093426834+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"cd ~ && python3 -c \"\nimport openpyxl\nwb = openpyxl.load_workbook('all_in_one_tim[...redacted 399 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"06b33bf7-6f3c-46d6-add9-d17d2c0db2fa","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:24:24.206323417+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"pkill -f \"python.*http.server\" 2>/dev/null; cd ~ && python3 -m http.server 80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"45bade0a-9565-4f32-800c-112dea474977","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:24:30.473586761+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"sleep 2 && curl -s -o /dev/null -w \"%{http_code}\" http://localhost/TimeTable_Das[...redacted 40 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"17ae4f7c-b227-4eec-92d1-65ff313baa05","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:24:41.683254347+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"pkill -f \"python.*http.server\" 2>/dev/null; cd ~ && python3 -m http.server 8080","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"58fcb30f-2cad-4aa9-b31f-1d31260bd4b5","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:24:47.797045121+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"sleep 2 && curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8080/TimeTabl[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0c3bba6e-5e4d-4c5c-ad11-e3af71758ef3","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:25:49.089925699+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"tailscale funnel status","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b427734-6c89-4642-87fe-c88c749333b3","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:25:54.624719186+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"pkill -f \"python.*http.server\" 2>/dev/null; cd ~ && python3 -m http.server 8000","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"4ea5b6de-0806-4075-83f2-a708bf0204c7","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:25:59.459555683+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Allow","rule_ids":[],"command_redacted":"sleep 2 && curl -s -o /dev/null -w \"%{http_code}\" http://localhost:8000/TimeTabl[...redacted 16 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6124ef90-e66d-4a9f-a29d-06a4358f37b0","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-05-09T15:26:51.771419185+00:00","session_id":"6faf9b14-c934-454e-8ba0-69588bbb5a9f","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"tail -20 ~/.hermes/memory.json 2>/dev/null || cat ~/.hermes/memory.json 2>/dev/n[...redacted 103 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c23f9571-c9b3-42bb-b75a-8ce576013690","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
