oz0 replay privilege propose
Usage and flags for oz0 replay privilege propose.
For: Operators and developers looking up a command.
Adds the suggested rules to the tenant's tool policy in shadow mode, with the preset origin privilege, through the same reviewed path as every tool-policy change: it takes --reason (or $OZ0_REASON), the audit trail keeps it, and a shadow rule records what it would have decided without deciding anything. A rule the policy has already (the same function, agent and origin) is not added twice.
Promote a rule when its shadow record and its replay say so; a change that turns a shadow rule on shows its newest replay.
Usage
oz0 replay privilege propose ID [--agent A,...] --reason TEXT [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--agent | strings | only the rules for these agents | |
--decision-ref | string | the decision or case the change follows, such as a case number (at most 200 characters) | |
--json | bool | print JSON instead of a table | |
--reason | string | why, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it | |
--tenant | string | default | tenant |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.