Hey, sorry about the earlier mix-up. The Command Denylist is still behind an experimental flag, so it isn’t visible in 3.2.16. It’ll roll out more broadly in upcoming releases.
For a hard block right now, the beforeShellExecution hook approach works on the current stable release: Hooks | Cursor Docs