{
  "permissions": {
    "defaultMode": "ask",
    "allow": [
      "Read",
      "Bash(ls:*)",
      "Bash(cat:*)",
      "Bash(grep:*)",
      "Bash(python3 *)",
      "Bash(aws * describe-*)",
      "Bash(terraform plan:*)",
      "Bash(kubectl get * --namespace dev)",
      "Read(/etc/passwd)",
      "WebFetch(domain:docs.internal.co)"
    ],
    "ask": [
      "Bash(git push:*)"
    ],
    "deny": [
      "Bash(sudo:*)",
      "Bash(rm:*)",
      "Bash(aws:*)",
      "Bash(terraform:*)",
      "Bash(kubectl get secret:*)",
      "Bash(python3 -c:*)",
      "Bash(git push --force:*)",
      "Read(/etc/**)",
      "Read(//**/.env*)",
      "Read(//**/id_rsa*)",
      "WebFetch",
      "Edit(//**/.claude/permcheck.json)",
      "Write(//**/.claude/permcheck.json)",
      "Edit(//**/.claude/settings.json)",
      "Write(//**/.claude/settings.json)"
    ]
  }
}