Directory / Windsurf Cascade

Windsurf Cascade

Coding agent (IDE) · Cognition · 4/7 verified · Last checked 2026-10-16

Four auto-execution levels from Disabled to Turbo, with user and team allow and deny lists. Deny beats allow.

Overall: C (1.75 avg, 4/7 controls verified)

Lock this down first

Use Allowlist Only and add rm, curl and git push to the deny list.

Criterion	Rating	Notes
Permission granularity	2/3	User and team allow and deny lists for terminal commands; deny wins.
Human approval gates	2/3	Auto-execution levels from Disabled to Turbo; denylisted commands always need approval.
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	1/3	.codeiumignore excludes files. Pre-hooks can block reads and writes.
Audit logs	2/3	Cascade hooks can write full JSONL transcripts. Admins can push hooks users cannot disable.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Vendor? Request a correction. We review corrections within 7 days.