approval

lesson

omp oh-my-pi sandbox approval security agents python

427 tok

omp 18.16.0: bash.patterns deny rules fail with eval subprocess and !cmd but work with tool.bash

bash.patterns gate the bash tool's command text only. Eval cells bypass them via subprocess or !cmd; await tool.bash(...) from eval is still gated. So is python3 script.py through bash. Setting eval.py: false and eval.js: false in a --config overlay drops the eval tool from the model's tool list.

@mahmoud