{"record":{"id":"57dde741e2fd7838","repo":"ruvnet/ruflo","slug":"execution-not-allowed-at-security-level-level","errorCode":null,"errorMessage":"Execution not allowed at security level: ${level}","messagePattern":"Execution not allowed at security level: (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"v3/plugins/agentic-qe/src/plugin.ts","lineNumber":437,"sourceCode":"  constructor(config: AQEPluginConfig['sandbox']) {\n    this.config = config;\n  }\n\n  async execute<T>(\n    fn: () => Promise<T>,\n    options: {\n      securityLevel?: SecurityLevel;\n      allowNetwork?: boolean;\n      allowFileWrite?: boolean;\n      timeout?: number;\n    } = {}\n  ): Promise<T> {\n    const timeout = options.timeout ?? this.config?.maxExecutionTime ?? 30000;\n    const level = options.securityLevel ?? 'medium';\n\n    // Validate execution is allowed\n    if (!this.checkPolicy('execute', level)) {\n      throw new Error(`Execution not allowed at security level: ${level}`);\n    }\n\n    this.activeOperations++;\n\n    try {\n      // Create timeout promise\n      const timeoutPromise = new Promise<never>((_, reject) => {\n        setTimeout(\n          () => reject(new Error(`Execution timeout after ${timeout}ms`)),\n          timeout\n        );\n      });\n\n      // Race execution against timeout\n      return await Promise.race([fn(), timeoutPromise]);\n    } finally {\n      this.activeOperations--;\n    }","sourceCodeStart":419,"sourceCodeEnd":455,"githubUrl":"https://github.com/ruvnet/ruflo/blob/fa13ee4ad60ac2090b1480656eb233521790d640/v3/plugins/agentic-qe/src/plugin.ts#L419-L455","documentation":"Sandbox.execute() checked the requested securityLevel against the configured policy with checkPolicy('execute', level) and it was denied. Execution at that level is not permitted by the sandbox configuration — raise the allowed level in config or run at a lower security level.","triggerScenarios":"Thrown at v3/plugins/agentic-qe/src/plugin.ts:437 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Run the operation at a security level that permits it, or request elevated privileges through the proper approval flow."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"fa13ee4ad60ac2090b1480656eb233521790d640","analyzedAt":"2026-08-18T21:34:22.708Z","contentChangedAt":"2026-08-18T21:34:22.708Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}