A platform team wants Copilot CLI sessions to display policy guidance, log prompts for audit review, and block risky commands with a clear escalation reason. A reviewer checks the repository-scoped hook configuration and policy script.

{
    "version": 1,
    "hooks": {
      "sessionStart": [
         {
           "type": "command",
           "bash": "./scripts/session-banner.sh",
           "powershell": "./scripts/session-banner.ps1",
           "cwd": ".github/hooks",
           "timeoutSec": 10
         }
      ],
      "userPromptSubmitted": [
         {
           "type": "command",
           "bash": "./scripts/log-prompt.sh",
           "powershell": "./scripts/log-prompt.ps1",
           "cwd": ".github/hooks",
           "timeoutSec": 10
         }
      ],
      "preToolUse": [
         {
           "type": "command",
           "bash": "./scripts/pre-tool-policy.sh",
           "powershell": "./scripts/pre-tool-policy.ps1",
           "cwd": ".github/hooks",
           "timeoutSec": 15
         }
      ]
    }
}
#!/bin/bash
set -euo pipefail

INPUT="$(cat)"
TOOL_NAME="$(echo "$INPUT" | jq -r '.toolName // empty')"
TOOL_ARGS_RAW="$(echo "$INPUT" | jq -r '.toolArgs // empty')"

if [ "$TOOL_NAME" != "bash" ]; then
   exit 0
fi

COMMAND="$(echo "$TOOL_ARGS_RAW" | jq -r '.command // empty')"

if echo "$COMMAND" | grep -Eq "sudo|rm -rf|curl .*\| bash|terraform apply -auto-approve"; then
   jq -n \
     --arg r "High-risk command blocked. Open an escalation issue with the proposed command and justification
." \
     '{permissionDecision:"deny", permissionDecisionReason:$r}'
   exit 0
fi

exit 0
Evaluate the following statements.

1. The sessionStart hook can show developers the escalation policy.
2. The preToolUse script blocks every Copilot CLI tool call.
3. The deny response gives a human-readable escalation reason.