id: default-safe
description: >-
  Conservative default. Confirmations required for destructive
  filesystem and git operations; network and exec allowed but logged.

capabilities:
  filesystem:
    read: allow
    write: confirm
    delete: confirm
  exec:
    enabled: confirm
  network:
    enabled: allow
    allow_hosts:
      - "*"
    deny_hosts: []
  mcp:
    enabled: allow

paths:
  allow:
    - "**"
  deny:
    - "~/.ssh/**"
    - "**/.env"
    - "**/.env.*"
    - "**/secrets/**"
    - ".sf/sf.db"
    - ".sf/sf.db-*"
    - ".sf/backups/**"
  redact:
    - "**/*api_key*"
    - "**/*token*"
    - "**/*password*"
    - "**/.env*"

confirmations:
  requiredFor:
    - rm -rf
    - git push --force
    - git push -f
    - git reset --hard
    - git clean -fdx
    - drop_table
    - drop_database

limits:
  max_files_per_op: 100
  max_command_runtime_sec: 600
