Allow-list
Sanari can only execute what is on. Auto is offered only after the same action has succeeded every time — 5+ executes, 100%. Anything else waits for a human.
| Runbook | Class | Command pattern | Record | Auto | On |
|---|---|---|---|---|---|
| Kill DB session | DB CPU | SELECT pg_terminate_backend($pid) | Off | On | |
| Restart API process | API failure | systemctl restart $svc | Off | On | |
| Rollback API tag | API failure | compose up --force-recreate $svc:$prev_tag | Off | On | |
| Restart database | — | systemctl restart postgresql | Off | Off |