Handling deferred actions.

When a rule returns defer, Faramesh pauses the action and waits for a human decision. The agent waits. Nothing runs until you approve or deny.

Resume an action that was held by a defer rule.

bash

faramesh agent approve <defer-token>

Block an action that was held by a defer rule.

bash

faramesh agent deny <defer-token>

Immediately deny all future actions from a specific agent. Use when an agent is behaving unexpectedly.

bash

faramesh agent kill <agent-id>

After kill switch is active, all new actions from that agent are denied immediately.

How operators handle deferred actions in practice.

01Watch events with faramesh audit tail

02Find the defer_token in the output

03Approve or deny the action

04Use faramesh explain for investigation when needed

Need help? Use any of these support options.

MIT License