{
  "_comment": "Place this file at ~/.pi/agent/configs/permission-gate.json",

  "patterns": [
    "\\brm\\s+(-rf?|--recursive)",
    "\\bsudo\\b",
    "\\b(chmod|chown)\\s+(?:-[a-z]+\\s+)*777(?:\\b|$)",
    "\\bprintenv\\b",
    "(^|\\s)env(\\s|$)"
  ],

  "blockWithoutUI": true
}