All Lessons

Which components define an opencode permission rule, and what evaluation order does the runtime follow when multiple rules match an attempted action?

1 / 1
advanced 30 min

Permissions and Human Gates

Order allow, ask, and deny rules so the factory cannot exceed its authority. Sandbox with worktrees, and place approval points as explicit stations.

Loading lesson content...

In the opencode.json permissions manifest below, what occurs if an agent attempts to execute 'cat .env.production' using the shell tool versus reading it via the built-in read tool?

1 / 1

A team configures every file read, edit, and shell command in Shipwright with effect: 'ask' to ensure comprehensive human oversight. Why does this approach degrade factory reliability in practice?

1 / 1