id: yolo
description: >-
  Confirmation-free policy applied when the YOLO flag is active
  (Ctrl+Y / /mode yolo). YOLO is a flag layered on top of Build or
  Autonomous — it is NOT a mode and does not appear as a Shift+Tab
  stop. Destructive operations execute without prompting. Path denies
  and redactions still apply.

capabilities:
  filesystem:
    read: allow
    write: allow
    delete: allow
  exec:
    enabled: allow
  network:
    enabled: allow
    allow_hosts:
      - "*"
    deny_hosts: []
  mcp:
    enabled: allow

paths:
  allow:
    - "**"
  deny:
    - "~/.ssh/**"
    - "**/.env"
    - "**/.env.*"
    - "**/secrets/**"
    - ".sf/sf.db"
    - ".sf/sf.db-*"
    - ".sf/backups/**"
  redact:
    - "**/*api_key*"
    - "**/*token*"
    - "**/*password*"
    - "**/.env*"

confirmations:
  requiredFor: []

limits:
  max_files_per_op: 1000
  max_command_runtime_sec: 3600