{
  "permissions": {
    "defaultMode": "dontAsk",
    "allow": [
      "Read(//**)",
      "Grep(//**)",
      "Bash(git *)",
      "Bash(cd * && git *)",
      "Bash(graphify query *)",
      "Bash(graphify god-nodes *)",
      "Bash(graphify path *)",
      "Bash(graphify explain *)",
      "Edit(docs/review/*.md)"
    ],
    "deny": [
      "Bash(sudo *)",
      "Bash(git push *)",
      "Bash(git commit *)",
      "Bash(agenix *)",
      "Bash(ssh *)",
      "Bash(graphify save-result *)",
      "Bash(graphify reflect *)",
      "Bash(graphify update *)",
      "Bash(graphify add *)",
      "Bash(graphify watch *)",
      "Edit(.git/**)",
      "Edit(agents/**)",
      "Edit(hosts/**)",
      "Edit(home/**)",
      "Edit(secrets/**)"
    ]
  }
}