rampart rules

rampart rules [flags]              # List custom rules
rampart rules list [flags]         # List custom rules (alias)
rampart rules remove <index>       # Remove a specific rule
rampart rules reset                # Remove all custom rules

rampart rules list [flags]

rampart rules remove <index> [flags]

rampart rules reset [flags]

  Custom Rules
  ──────────────────────────────────────────────────────────────

  Global
  ~/.rampart/policies/custom.yaml

  #     ACTION   TOOL      PATTERN                               ADDED
     1  allow    exec      npm install *                         2 hours ago
        → User-allowed: npm install *
     2  deny     exec      curl * | bash                         1 day ago
        → User-blocked: curl * | bash
     3  allow    read      /tmp/**                               3 days ago

  Project
  .rampart/policy.yaml

  #     ACTION   TOOL      PATTERN                               ADDED
     4  deny     write     /etc/**                               1 week ago
        → Production config is read-only

  ──────────────────────────────────────────────────────────────
  Total: 15 rules (11 standard + 4 custom)
  Manage: rampart rules remove <#>

rampart rules --json

[
  {
    "index": 1,
    "source": "global",
    "action": "allow",
    "tool": "exec",
    "pattern": "npm install *",
    "message": "User-allowed: npm install *",
    "added_at": "2026-03-03T13:00:00Z"
  },
  {
    "index": 2,
    "source": "global",
    "action": "deny",
    "tool": "exec",
    "pattern": "curl * | bash",
    "message": "User-blocked: curl * | bash",
    "added_at": "2026-03-02T10:00:00Z"
  }
]

rampart rules

rampart rules --global

rampart rules --project

rampart rules remove 2

  Remove this rule?

    Action:  deny
    Tool:    exec
    Pattern: curl * | bash
    Added:   1 day ago
    Source:  global

  [y/N] y

  ✓ Rule removed
  ✓ Policy reloaded (14 rules active)

rampart rules remove 2 --force

rampart rules reset

  This will remove all custom rules:

    Global:  3 rule(s)
    Project: 1 rule(s)

  Standard policy (11 rules) will not be affected.

  Reset? [y/N] y

  ✓ Removed 4 custom rule(s)
  ✓ Policy reloaded (11 rules active)

rampart rules --json > rules.json

Global rules:  1, 2, 3
Project rules: 4, 5

✓ Policy reloaded (14 rules active)

Saved (14 rules). Run 'rampart serve' to activate.

rampart rules

rampart rules remove 5
rampart rules remove 3

rampart rules reset --force

rampart rules --json > backup.json

#!/bin/bash
# Ensure no custom rules in CI
count=$(rampart rules --json | jq length)
if [ $count -gt 0 ]; then
  echo "Custom rules detected in CI environment"
  rampart rules
  exit 1
fi

# List only deny rules
rampart rules --json | jq '.[] | select(.action == "deny")'

# Count rules by action
rampart rules --json | jq 'group_by(.action) | map({action: .[0].action, count: length})'

  No custom rules found.

  Add rules with:
    rampart allow "command pattern"
    rampart block "command pattern"

rules: index 10 not found (have 4 rule(s))

rules: invalid index "-1" — must be a positive integer (indices start at 1)

rules: load global custom rules: open ~/.rampart/policies/custom.yaml: no such file or directory

rampart init
rampart allow "npm test"

~/.rampart/policies/custom.yaml

.rampart/policy.yaml