In auto mode with sandboxing, Bash, PowerShell, and Monitor commands can now be assigned per-command allowed_domains. The hosts a command needs are reviewed with it and opened for it alone; other hosts are refused.

This changes a workflow step: instead of a blanket network policy, each command carries its own host allowlist. Operators will need to specify allowed domains per command, which could affect how scripts are written and reviewed.