Sync committed .claude lockdown files to coily v2.43.0 render #164

New issue

Open

opened 2026-05-28 08:13:45 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-05-28 08:13:45 +00:00

Owner

Task

Committed .claude/lockdown-deny.sh / .claude/settings.json are stale relative to the render produced by coily v2.43.0 (latest). The current binary emits a stronger deny list (blocks bash, sh, python, node, ruby, perl, PowerShell, terraform, xargs, etc.) plus a granular read-only git allow set.

Sweeping the freshly-rendered files into the repo per the agentic-os "Coily-Managed Lockdown Files" policy (last-pushed wins) so the committed canonical boundary matches the latest coily.

**Task** Committed `.claude/lockdown-deny.sh` / `.claude/settings.json` are stale relative to the render produced by coily v2.43.0 (latest). The current binary emits a stronger deny list (blocks `bash`, `sh`, `python`, `node`, `ruby`, `perl`, PowerShell, `terraform`, `xargs`, etc.) plus a granular read-only `git` allow set. Sweeping the freshly-rendered files into the repo per the agentic-os "Coily-Managed Lockdown Files" policy (last-pushed wins) so the committed canonical boundary matches the latest coily.

coilysiren referenced this issue

2026-05-30 05:43:34 +00:00

Uncommitted coily-regenerated lockdown drift on kai-server checkout #19

coilysiren added the

label

2026-06-04 08:16:53 +00:00

coilysiren added

and removed

labels

2026-06-17 08:40:16 +00:00