forge-legacy / rules

---
description: Cursor YOLO Mode — recommended terminal permissions for this project
---

Cursor's allow/deny lists are configured in the IDE, not project files.

**Enable YOLO mode**: Cursor Settings → Features → Chat & Composer → Enable YOLO mode

## Recommended Allow List (auto-run without prompt)

```
Bash(git status *), Bash(git log *), Bash(git diff *), Bash(git branch *)
Bash(git add *), Bash(git commit *), Bash(git push *), Bash(git stash *)
Bash(git checkout *), Bash(git switch *), Bash(git merge *), Bash(git worktree *)
Bash(bun *), Bash(bunx *), Bash(npm *), Bash(npx *), Bash(node *)
Bash(forge *), Bash(gh *), Bash(openspec *)
Bash(ls *), Bash(cat *), Bash(grep *), Bash(find *), Bash(pwd *), Bash(which *)
Bash(echo *), Bash(head *), Bash(tail *), Bash(sort *), Bash(wc *)
Bash(mkdir *), Bash(touch *), Bash(cp *), Bash(mv *)
```

## Confirm Before Running (prompt each time)

<!-- git reset --hard moved from Deny to Confirm ("ask" policy).
     Rationale: agents may need it for worktree cleanup during /verify stage,
     but it should always require user confirmation since it discards uncommitted changes. -->
```
Bash(git rebase *), Bash(git reset --hard *)
```

## Recommended Deny List (always block)

```
Bash(rm -rf *), Bash(git push --force *), Bash(git push -f *)
```

See [docs/research/agent-permissions.md](../../docs/research/agent-permissions.md) for the full permission tier classification and rationale.