Summary

Replace today's flat allow-list with Vec flattened on resolve, with longest-pattern wins.

Acceptance criteria

• Built-in defaults loaded.
• Per-agent rulesets layered on top.
• User config wins last.

Files

crates/execpolicy/src/lib.rs; crates/config/src/lib.rs

Size

S

Source

Source tag: OPENCODE. Add exact upstream/opencode source links during implementation if they are not already known. Do not copy external code blindly; port the behavior into this repo's architecture.

Filed from 2026-05-02 v0.8.8 intake.