Public
Description
A working floor: the same autonomous permission posture as the other standard variants, plus a static deny of Read on ./.env and ./.env.*. The deny is not a prompt. A shell command, a hook or an MCP server is a different route and this rule does not close it.
Full machine-readable record; the useful fields are summarized above
Exact components included in this setup.
0 · Requires credentials: No