5407a1d235
Self-Close: Pane-Wrapper (herdr-self-close.nix), Rollenverträge und Claude-Settings für graphics/administrator/agent-manager/orga, mit Regressionstests in agents/tests/roles.sh. Reviewer bleibt bewusst ausgeschlossen (read-only, keine Aktivierungsfreigabe). Eskalationsentwurf (docs/herdr-eskalation-review-entwurf.md) freigegeben: Reviewer-Pflicht ab Risikoschwelle statt bei jedem Diff, Agent-Manager zusätzlich zum Administrator als Fixer für Rollenvertrags-Blocker (agent-manager.md 2.0.0 -> 2.1.0), Rückfrage-Kanal zunächst nur als Pilot bei Orga (orga.md 2.0.0 -> 2.1.0). Details in docs/herdr-orchestration.md. Begleitende Infrastruktur: agent-codex/orga-agent/finance-agent-Worker, orga-agent-Client und hdm.0ff.space-Klon-Doku. graphify-out/, .agents/ und nvim.log neu gitignored (lokale Tool-Ausgabe/Debris, kein Repo-Inhalt). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011uSxdbo8zykSeH5WCMmbvp
37 lines
904 B
JSON
37 lines
904 B
JSON
{
|
|
"permissions": {
|
|
"defaultMode": "dontAsk",
|
|
"allow": [
|
|
"Read(agents/**)",
|
|
"Read(docs/herdr-orchestration.md)",
|
|
"Glob(agents/**)",
|
|
"Grep(agents/**)",
|
|
"Grep(docs/herdr-orchestration.md)",
|
|
"Edit(agents/**)",
|
|
"Write(agents/**)",
|
|
"Edit(docs/herdr-orchestration.md)",
|
|
"Write(docs/herdr-orchestration.md)",
|
|
"Bash(git diff *)",
|
|
"Bash(git status *)",
|
|
"Bash(bash agents/tests/*)",
|
|
"Bash(/etc/scripts/close-my-pane.sh)"
|
|
],
|
|
"deny": [
|
|
"Bash(sudo *)",
|
|
"Bash(nixos-rebuild *)",
|
|
"Bash(agenix *)",
|
|
"Bash(ssh *)",
|
|
"Bash(git push *)",
|
|
"Bash(git commit *)",
|
|
"Read(hosts/**)",
|
|
"Read(home/**)",
|
|
"Read(secrets/**)",
|
|
"Edit(hosts/**)",
|
|
"Edit(home/**)",
|
|
"Edit(secrets/**)",
|
|
"Write(hosts/**)",
|
|
"Write(home/**)",
|
|
"Write(secrets/**)"
|
|
]
|
|
}
|
|
}
|