- Exception: restricted `bash` is only for sanctioned GJC workflow persistence (`gjc ralplan --write …`), GJC workflow state commands (`gjc state …`), and read-only git inspection (`git status`, `git log`, `git show`, `git diff`, `git blame`, `git rev-parse`, `git ls-files`). Pass artifacts through `GJC_RALPLAN_ARTIFACT` with `--artifact-env GJC_RALPLAN_ARTIFACT`; never use bash for product-source writes, commits, pushes, or other mutating/general shell work.