grith digest

List the quarantine queue, and review held calls one keypress at a time.

grith digest
grith digest review

The digest is the queue of calls that scored above the allow threshold and at or below the deny threshold - above 3.0, up to and including 8.0. Bare grith digest prints the pending count, then up to 20 items, each as its score in brackets, the call type and a one-line summary of the arguments, highest score first.

terminal

$ grith digest
Digest queue: 0 pending items
No pending digest items.

grith digest review opens the interactive reviewer.

terminal

$ grith digest review
No pending digest items to review.

Review keys

One keypress, case-insensitive.

Key	Action
`a`	Approve
`d`	Deny
`l`	Approve, and learn the decision
`e`	Escalate
`u`	Approve, and unlock egress containment
`t`	Deny, and terminate the session
`p`	Approve, and add a permanent allowlist entry
`s`	Skip
`v`	Toggle list and detail view
`j` / `k`	Next / previous item
`q`	Quit

q leaves the reviewer. Anything you have not answered stays pending and is still there next time.

⚠️The inline prompt is the one where quitting denies

These keys are also used by the single-item prompt the grith run agent loop shows when a call queues mid-task. There the same keypresses are decisions on the one item in front of you, and q, Esc or letting the timeout expire all deny it. Only the multi-item grith digest review treats q as a plain exit.

Where items come from

Anything a supervised session queues while nobody is watching, plus anything the agent loop in grith run queues. An interactive grith exec session queues the item too, but its TUI dialog resolves it on the spot, so it is already answered before you would ever run grith digest. Headless sessions record their queued calls as informational entries - the decision was already made, fail-closed or by --allow-queued, and the entry is there to read rather than to answer.

grith digest

Review keys

Where items come from

See also