{
  "$comment": "The unattended profile as v20.2.1 wrote it into ~/.claude/settings.json, frozen: the signature install --unattended uses to recognise and remove those entries from the attended settings file. Rules only; the reasons are in that release's schema.",
  "version": "20.2.1",
  "defaultMode": "dontAsk",
  "allow": [
    "Read",
    "Glob",
    "Grep",
    "Edit",
    "Write",
    "NotebookEdit",
    "Agent",
    "Skill",
    "WebFetch",
    "TaskCreate",
    "TaskUpdate",
    "TaskList",
    "TaskGet",
    "mcp__multi-agent-toolkit__*",
    "Bash(git *)",
    "Bash(gh *)",
    "Bash(bash *)",
    "Bash(node *)",
    "Bash(python3 *)",
    "Bash(jq *)",
    "Bash(npm run *)",
    "Bash(npm test *)",
    "Bash(npm ci *)",
    "Bash(npx *)",
    "Bash(xcodebuild *)",
    "Bash(xcrun *)",
    "Bash(swift *)",
    "Bash(./gradlew *)",
    "Bash(pod install *)",
    "Bash(pytest *)",
    "Bash(go test *)",
    "Bash(go build *)",
    "Bash(cargo test *)",
    "Bash(cargo build *)",
    "Bash(make *)",
    "Bash(ls *)",
    "Bash(cat *)",
    "Bash(head *)",
    "Bash(tail *)",
    "Bash(wc *)",
    "Bash(find *)",
    "Bash(grep *)",
    "Bash(rg *)",
    "Bash(sed *)",
    "Bash(awk *)",
    "Bash(sort *)",
    "Bash(diff *)",
    "Bash(mkdir *)",
    "Bash(cp *)",
    "Bash(mv *)",
    "Bash(echo *)",
    "Bash(printf *)",
    "Bash(date *)",
    "Bash(cd *)"
  ],
  "deny": [
    "Bash(gh pr merge *)",
    "Bash(git push *)",
    "Bash(git push)",
    "Read(~/.ssh/**)",
    "Read(~/.aws/**)",
    "Read(~/.gnupg/**)",
    "Read(~/Library/Keychains/**)",
    "Edit(~/.claude/settings.json)",
    "Edit(~/.claude/scripts/**)",
    "Edit(~/.claude/lib/**)",
    "Edit(~/.claude/autopilot/**)",
    "Edit(**/.github/workflows/**)",
    "mcp__multi-agent-toolkit__research_*"
  ],
  "env": [
    ["MCP_TOOLKIT_URL_POLICY", "strict"],
    ["MCP_TOOLKIT_INDEX_DENY", "~/.ssh,~/.aws,~/.gnupg,~/Library/Keychains"]
  ]
}