[2.5] Privilege escalation with explicit confirmation (no silent sudo) #5
Description
Implement action classification (read-only vs privileged), explicit per-action confirmation gates, scoped elevation (sudo for terminal, polkit for web/API), clear prompts showing risk/scope, least-privilege execution, and protections against prompt injection.
Scope
This epic covers 8 decisions and 8 tasks from the Cortex Linux planning system.
Source
- Planning Tool: Skilliks
- Module: See internal planning documentation
Tasks
Tasks will be added as sub-issues or checklist items as specification is refined.
Epic generated from Cortex Linux strategic planning