{
  "permissions": {
    "defaultMode": "dontAsk",
    "allow": [
      "Read(agents/**)",
      "Read(docs/herdr-orchestration.md)",
      "Glob(agents/**)",
      "Grep(agents/**)",
      "Grep(docs/herdr-orchestration.md)",
      "Edit(agents/**)",
      "Write(agents/**)",
      "Edit(docs/herdr-orchestration.md)",
      "Write(docs/herdr-orchestration.md)",
      "Bash(git diff *)",
      "Bash(git status *)",
      "Bash(bash agents/tests/*)",
      "Bash(/etc/scripts/close-my-pane.sh)"
    ],
    "deny": [
      "Bash(sudo *)",
      "Bash(nixos-rebuild *)",
      "Bash(agenix *)",
      "Bash(ssh *)",
      "Bash(git push *)",
      "Bash(git commit *)",
      "Read(hosts/**)",
      "Read(home/**)",
      "Read(secrets/**)",
      "Edit(hosts/**)",
      "Edit(home/**)",
      "Edit(secrets/**)",
      "Write(hosts/**)",
      "Write(home/**)",
      "Write(secrets/**)"
    ]
  }
}