{
  "zeroAccessPaths": [
    ".env",
    ".env.*",
    "~/.ssh",
    "~/.aws",
    "~/.gnupg",
    "*.pem",
    "*.key"
  ],
  "readOnlyPaths": [
    ".git/",
    "node_modules/",
    "package-lock.json",
    "pnpm-lock.yaml",
    "bun.lock",
    "dist/",
    "build/"
  ],
  "noDeletePaths": [
    ".git/",
    "AGENTS.md",
    "README.md",
    ".pi/agents/",
    ".pi/prompts/",
    ".pi/extensions/"
  ],
  "bashToolPatterns": [
    { "pattern": "\\brm\\s+(-rf?|--recursive)", "reason": "recursive deletion" },
    { "pattern": "\\bgit\\s+reset\\s+--hard\\b", "reason": "destructive git reset" },
    { "pattern": "\\bgit\\s+clean\\s+-", "reason": "destructive git clean" },
    { "pattern": "\\bgit\\s+checkout\\s+\\.", "reason": "workspace-wide checkout" },
    { "pattern": "\\bgit\\s+add\\s+(-A|\\.)", "reason": "bulk staging hides unrelated agent work" },
    { "pattern": "\\bgit\\s+commit\\b", "reason": "direct git commit is blocked; use governed /zcommit commit only when authorized" },
    { "pattern": "\\bgit\\s+push\\b.*\\s(--force|-f|--force-with-lease)\\b", "reason": "force push is blocked by ZOB git policy" },
    { "pattern": "\\bgit\\s+push\\b", "reason": "direct git push is blocked; use governed /zcommit push only when authorized" },
    { "pattern": "\\bgit\\s+tag\\b", "reason": "direct git tag is blocked by ZOB git policy" },
    { "pattern": "\\bsudo\\b", "reason": "privileged command", "ask": true },
    { "pattern": "\\b(chmod|chown)\\b.*777", "reason": "unsafe permissions" },
    { "pattern": "DROP\\s+DATABASE|TRUNCATE\\s+TABLE", "reason": "destructive database operation" },
    { "pattern": "docker\\s+system\\s+prune", "reason": "destructive docker cleanup", "ask": true },
    { "pattern": "aws\\s+s3\\s+rm\\b.*--recursive", "reason": "recursive cloud deletion" },
    { "pattern": "\\bkillall\\b|\\bpkill\\b", "reason": "broad process kill", "ask": true }
  ]
}