hushspec: "0.1.0"
name: "__hushspec_panic__"
description: "Emergency deny-all policy. Activated by panic mode."
rules:
forbidden_paths:
enabled: true
patterns:
- "**"
exceptions:
egress:
enabled: true
allow:
block:
- "*"
default: block
shell_commands:
enabled: true
forbidden_patterns:
- ".*"
tool_access:
enabled: true
allow:
block:
- "*"
require_confirmation:
default: block
computer_use:
enabled: true
mode: fail_closed
allowed_actions: