Devika Verma d976e82a88 Phase 0: golden decision table for the permission engine ...

Freezes today's evaluate() verdict across 26 (mode, tool, args, grants)
situations, so any later permission change shows up as a row-diff. Four rows
are marked BASELINE-WRONG / BASELINE-ANNOYING on purpose: they record known
gaps (shell auto with no sandbox, find -delete and find -exec auto-allowed via
a find prefix, git status && git diff rejected for the operator, web_fetch
never gating in any mode). The PRs that fix these flip their rows here as the
visible proof.

Design of record: ocw-context/docs/reviewed-auto-mode.md Parts 3 and 7.

2026-08-11 11:18:21 -07:00

..

decision_matrix.csv

Phase 0: golden decision table for the permission engine

2026-08-11 11:18:21 -07:00