Permissions: targeted ask rules for scp / pipe-to-ssh / ssh-virsh (classifier walls -> gates, per 2026-07-19 ruling)

Fork: 0

OpenStack / openstack-caracal-dc-dc

Browse code Permissions: targeted ask rules for scp / pipe-to-ssh / ssh-virsh (classifier walls -> gates, per 2026-07-19 ruling) Deploy-window surfaces that hard-denied and stalled work: scp staging to the dc0 rack, cat\|ssh file staging, nested virsh over ssh. Per the ruled convention these become ASK (approval prompts, Remote-Control friendly), never allow -- hard rule 3 mutation gating is unchanged, and read-only ssh probes stay frictionless. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KiUu1oqt76tWvV4vEC3NAr dc-dc-stage3-phase2-dc-substrate
1 parent 51853db commit 5c781804b52a51e3bfd6387ac4d2a8f3c3d141a0 JANeumatrix authored 23 hours ago

Browse code

Deploy-window surfaces that hard-denied and stalled work: scp staging to
the dc0 rack, cat|ssh file staging, nested virsh over ssh. Per the ruled
convention these become ASK (approval prompts, Remote-Control friendly),
never allow -- hard rule 3 mutation gating is unchanged, and read-only
ssh probes stay frictionless.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KiUu1oqt76tWvV4vEC3NAr

dc-dc-stage3-phase2-dc-substrate

1 parent 51853db commit 5c781804b52a51e3bfd6387ac4d2a8f3c3d141a0

JANeumatrix authored 23 hours ago

Patch

Unified Split

Showing 1 changed file

Ignore Space Show notes View .claude/settings.json

Show line notes below