{
  "permissions": {
    "deny": [
      "WebFetch",
      "Read(.env)",
      "Read(.env.*)",
      "Read(secrets/**)",
      "Read(Private/**)",
      "Edit(Private/**)",
      "Write(Private/**)",
      "Read(.obsidian/**)",
      "Edit(.obsidian/**)",
      "Write(.obsidian/**)"
    ],
    "allow": [
      "Bash(git diff:*)",
      "Bash(git status:*)",
      "Bash(git log:*)",
      "Bash(rg:*)"
    ]
  },
  "attribution": {
    "commit": " (vault changes by Claude Code)"
  },
  "permissions.defaultMode": "default"
}