Settings -> Blacklist is a Fleet-wide banned-phrase list (plain text or regex) checked against every step's command text. Blocked by default everywhere unless a specific server/job/step has an override, added through that object's Permissions dialog. The Test button on a phrase shows exactly what it would catch right now.

See command-blacklist.md for the full technical story.