`safe-restart-allowlist.json`

10 lines
{
  "_README": "Q4=B (DTD 2026-06-24): DEFAULT-DENY. A DARK service is auto-restarted by fleet-reconcile.mjs ONLY if its exact `id` is listed in `allow` below, it is on mac2, and it does NOT match any deny_pattern. Everything else is GATED — surfaced as a memo to ~/.claude/yolo-queue/pending-approval for Steve. Add an id here only once you trust it's safe & idempotent to bounce. Empty allow = nothing auto-restarts yet = maximally safe; the officer still alerts + drafts memos.",
  "allow": [],
  "deny_patterns": [
    "cadence", "shopify", "aichat", "big[-_]?red", "storefront",
    "new-?arrivals", "curator", "mailer", "drops", "instagram", "tiktok",
    "checkout", "buybutton", "concierge", "rotation", "publish"
  ]
}