# Agent permissions - Only run `git` commands with the user's explicit permission for that specific command/action. - Never run `docker` commands (build, compose up, run, etc.) — leave all Docker execution to the user. @AGENTS.md