{
  "permissions": {
    "defaultMode": "auto",
    "allow": [
      "Read(**)",
      "Grep(**)",
      "Edit(docs/intent/*.md)",
      "Bash(/etc/scripts/close-my-pane.sh)",
      "AskUserQuestion"
    ],
    "deny": [
      "Edit(.git/**)",
      "Edit(agents/**)",
      "Edit(hosts/**)",
      "Edit(home/**)",
      "Edit(secrets/**)"
    ]
  }
}