feat(permission): integrate auto-review and hard guards

2026-10-26 10:45:22 +00:00 · 2026-09-02 15:34:29 +08:00
parent a4807dde67
commit 180da95ab7
79 changed files with 4263 additions and 9203 deletions
@@ -0,0 +1,17 @@
+{
+  // User-configurable, global-only hard boundary. Project policy, session
+  // grants and AutoReview cannot override a matching deny.
+  "version": 1,
+  "permission": {
+    "bash": {
+      "rm -rf /": "deny",
+      "rm -rf /*": "deny",
+      "rm -rf ~": "deny",
+      "rm -rf ~/*": "deny",
+      "sudo rm -rf /": "deny",
+      "sudo rm -rf /*": "deny",
+      "mkfs*": "deny",
+      "dd * of=/dev/*": "deny"
+    }
+  }
+}