{
  "permissions": {
    "defaultMode": "dontAsk",
    "allow": [
      "Read(**)",
      "Glob(**)",
      "Grep(**)",
      "WebSearch",
      "WebFetch",
      "Edit(docs/research/*.md)",
      "Bash(/etc/scripts/close-my-pane.sh)",
      "Bash(*)"
    ],
    "deny": [
      "Edit(.git/**)",
      "Edit(agents/**)",
      "Edit(hosts/**)",
      "Edit(home/**)",
      "Edit(secrets/**)",
      "Bash(sudo *)",
      "Bash(git commit *)",
      "Bash(git push *)",
      "Bash(agenix *)",
      "Bash(ssh *)",
      "Bash(rm *)",
      "Bash(mv *)",
      "Bash(chmod *)",
      "Bash(chown *)",
      "Bash(kill *)",
      "Bash(systemctl start *)",
      "Bash(systemctl stop *)",
      "Bash(systemctl restart *)",
      "Bash(systemctl enable *)",
      "Bash(systemctl disable *)",
      "Bash(nixos-rebuild switch *)",
      "Bash(nixos-rebuild test *)",
      "Bash(nix build *)",
      "Bash(reboot*)",
      "Bash(shutdown *)"
    ]
  }
}