Synopsis
Description
security manages profClaw’s security enforcement layer. Three policy levels control how strictly tool execution is governed. In standard and strict modes, certain tool calls require explicit approval before they run. This command lets you view the current policy, change it, review the audit log, and approve or deny pending requests.
Subcommands
| Subcommand | Description |
|---|---|
status | Show current policy level and pending approval count |
set-policy <level> | Set the security policy to permissive, standard, or strict |
audit | View the security audit log |
approve <id> | Approve a pending tool execution request |
deny <id> | Deny a pending tool execution request |
Security Policy Levels
| Level | Description |
|---|---|
permissive | All tools run without approval |
standard | Moderate and dangerous tools require approval |
strict | All non-safe tools require explicit approval |
security status
Output as JSON with policy level, pending approval count, and last audit time.
security set-policy <level>
One of
permissive, standard, or strict.Output the updated status as JSON.
security audit
Maximum number of entries to show.
Show only entries with
pending result status (awaiting approval).Output as JSON array.
security approve <id> / security deny <id>
Audit entry ID to approve or deny.
Reason for denial (only for
deny subcommand).Output result as JSON.
Examples
Related
profclaw audit- Detailed audit log viewerprofclaw auth- User and authentication managementprofclaw device- Device pairing and trust- Security Guide - Security architecture and configuration