Policy

Code

A policy says which files agents may and may not change. Set one for the workspace, and optionally a narrower one per repository.

{
  "version": 1,
  "allow": ["apps/**", "packages/**"],
  "deny": ["**/.env*", ".github/workflows/**"]
}

deny always wins.
allow, when present, is the only place agents may work.
Patterns use *, ?, ** and {a,b}.
Checked twice. When an intent is declared, for the files it lists by path, and again by CI on what really changed.
A flagged intent is never refused. In strict mode, edits to the flagged files are stopped.

Documentation