Directory / Windsurf Cascade

Windsurf Cascade

Coding agent (IDE) · Cognition · Last checked 2026-10-16

Four auto-execution levels from Disabled to Turbo, with user and team allow and deny lists. Deny beats allow.

Overall: C (1.75 avg over 4 verified criteria)

Lock this down first

Use Allowlist Only and add rm, curl and git push to the deny list.

Criterion	Rating	Notes
Permission granularity	2/3
Human approval gates	2/3
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	1/3	.codeiumignore excludes files. Pre-hooks can block reads and writes.
Audit logs	2/3	Cascade hooks can write full JSONL transcripts. Admins can push hooks users cannot disable.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.