agentwire-dev 1.77.5__tar.gz → 1.78.0__tar.gz

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentwire-dev
-Version: 1.77.5
+Version: 1.78.0
 Summary: Multi-session voice web interface for AI coding agents
 Project-URL: Homepage, https://agentwire.dev
 Project-URL: Repository, https://github.com/dotdevdotdev/agentwire-dev
@@ -228,7 +228,7 @@ Requires-Dist: aiohttp-jinja2>=1.6
 Requires-Dist: aiohttp>=3.13.4
 Requires-Dist: av>=12.0.0
 Requires-Dist: certifi>=2026.10.23
-Requires-Dist: damage-control-dev<0.2,>=0.1.6
+Requires-Dist: damage-control-dev<0.3,>=0.2.0
 Requires-Dist: fastapi>=0.104.0
 Requires-Dist: jinja2>=3.1.0
 Requires-Dist: kokoro-onnx>=0.4.9; python_version < '3.14'

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/RELEASING.md

@@ -6,7 +6,7 @@ Every release does **both** a PyPI publish and a GitHub release. The **GitHub re
 
 ## The engine is a separate project (single source)
 
-The damage-control engine has exactly one source: the `damage-control-dev` repo (<https://github.com/dotdevdotdev/damage-control-dev>), published on PyPI. `agentwire-dev` only *consumes* it through the range in `pyproject.toml` (currently `damage-control-dev>=0.1.6,<0.2`); a checkout and a PyPI install both resolve it from PyPI. There is no copy of the engine in this repo and nothing to release from here. `tests/unit/test_damage_control_pin.py` checks that the declared floor/ceiling parse and that the installed engine satisfies them.
+The damage-control engine has exactly one source: the `damage-control-dev` repo (<https://github.com/dotdevdotdev/damage-control-dev>), published on PyPI. `agentwire-dev` only *consumes* it through the range in `pyproject.toml` (currently `damage-control-dev>=0.2.0,<0.3`); a checkout and a PyPI install both resolve it from PyPI. There is no copy of the engine in this repo and nothing to release from here. `tests/unit/test_damage_control_pin.py` checks that the declared floor/ceiling parse and that the installed engine satisfies them.
 
 To ship an engine change:
 

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/agentwire/__init__.py

@@ -1,3 +1,3 @@
 """AgentWire - Multi-session voice web interface for AI coding agents."""
 
-__version__ = "1.77.5"
+__version__ = "1.78.0"

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/agentwire/safety/rule_baselines.json

@@ -17,6 +17,7 @@
       "2c49ab654ff58675a3917d852093bc5f5ecc7d16cab10cd5046d11e8cede9621",
       "3cf2127d5f470f1fc9b24c3507c091b999110ed2fbb300f19765ac905d457e16",
       "5ba2be093a035021f04be9f3adcc8a234cf8f04dd63955f8693d72472d7c3a21",
+      "7675af135ecb0381130ab5988a54e9860ef975d568fd9025d003481c4a841144",
       "a30f698ca4156bc9a0715c5df4583c41d026a566d0bd8d534d263bec8b951e74",
       "a977b051e9ff66490816bbbd562e9106015c4e0950b547422f92debfd7d361f6",
       "c471a54cf5045348dc1df644852dc5933aa8bfd0e1aee0cddc1a20862128adde"

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/agentwire/safety/rules/agentwire.yaml

@@ -42,6 +42,6 @@ bashToolPatterns:
 
   # Note: `agentwire tasks promote` (#720/#721) is blocked via
   # safety/_core.py's PROTECTED_COMMAND_PATTERNS instead of an ordinary
-  # bashToolPatterns entry here — it needs escape-hatch/kill-switch immunity,
+  # bashToolPatterns entry here — it needs `# ask:`/kill-switch immunity,
   # which only the code-level protected-command check provides (a rule in
-  # this file would still be overridable by `# allow:`).
+  # this file would still be softened by `# ask:`).

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/agentwire/tasks_cli.py

@@ -24,8 +24,8 @@ closed):
   shelled out to `tasks promote` would hand the agent an instant, unguarded
   bypass of the whole scheme. CLI-only keeps this on the human's own terminal.
 - `agentwire tasks promote` is ALSO hard-blocked as a `PROTECTED_COMMAND_PATTERNS`
-  entry in `damage_control/engine.py` — escape-hatch- and kill-switch-EXEMPT (same tier
-  as the protected-control-plane file check), so `# allow:` and
+  entry in `damage_control/engine.py` — `# ask:`- and kill-switch-EXEMPT (same tier
+  as the protected-control-plane file check), so `# ask:` and
   `enabled: false` can't open it either.
 - `cmd_tasks_promote` ITSELF refuses to run outside a genuine host context
   (see `_host_context_ok` below), regardless of how it's reached. This is the

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/corpus/cases/bypass.yaml

@@ -1352,3 +1352,26 @@
   - secrets
   - home
   source: tests/unit/test_damage_control_bypass.py::test_secrets_stay_blocked_wherever_home_is
+- id: ask-comment-001
+  tool: Bash
+  input: 'git reset --hard origin/main  # ask: sync to remote'
+  context:
+    ruleset: full
+  expect:
+    decision: ask
+  class: ask-comment
+  tags:
+  - ask-comment
+  source: tests/unit/test_damage_control_bypass.py::test_ask_comment_turns_a_block_into_an_undemotable_human_confirmation
+- id: ask-comment-002
+  tool: Bash
+  input: 'git reset --hard origin/main  # allow: sync to remote'
+  context:
+    ruleset: full
+  expect:
+    decision: block
+  class: ask-comment
+  tags:
+  - ask-comment
+  - removed-escape
+  source: tests/unit/test_damage_control_bypass.py::test_the_old_allow_comment_has_no_effect

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/corpus/cases/control_plane.yaml

@@ -804,20 +804,20 @@
   - control-plane
   - indirect
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-001
+- id: control-plane-ask-and-kill-switch-001
   tool: Bash
-  input: 'echo ''enabled: false'' > ~/.agentwire/damagecontrol.yml  # allow: I really want to'
+  input: 'echo ''enabled: false'' > ~/.agentwire/damagecontrol.yml  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-002
+- id: control-plane-ask-and-kill-switch-002
   tool: Bash
   input: 'echo ''enabled: false'' > ~/.agentwire/damagecontrol.yml'
   context:
@@ -826,25 +826,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-003
+- id: control-plane-ask-and-kill-switch-003
   tool: Bash
-  input: 'echo ''{}'' > ~/.claude/settings.json  # allow: I really want to'
+  input: 'echo ''{}'' > ~/.claude/settings.json  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-004
+- id: control-plane-ask-and-kill-switch-004
   tool: Bash
   input: echo '{}' > ~/.claude/settings.json
   context:
@@ -853,25 +853,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-005
+- id: control-plane-ask-and-kill-switch-005
   tool: Bash
-  input: 'rm ~/.agentwire/damage-control/core.yaml  # allow: I really want to'
+  input: 'rm ~/.agentwire/damage-control/core.yaml  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-006
+- id: control-plane-ask-and-kill-switch-006
   tool: Bash
   input: rm ~/.agentwire/damage-control/core.yaml
   context:
@@ -880,25 +880,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-007
+- id: control-plane-ask-and-kill-switch-007
   tool: Bash
-  input: 'sed -i ''s/x/y/'' ~/.agentwire/hooks/damage-control/bash-tool-damage-control.py  # allow: I really want to'
+  input: 'sed -i ''s/x/y/'' ~/.agentwire/hooks/damage-control/bash-tool-damage-control.py  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-008
+- id: control-plane-ask-and-kill-switch-008
   tool: Bash
   input: sed -i 's/x/y/' ~/.agentwire/hooks/damage-control/bash-tool-damage-control.py
   context:
@@ -907,25 +907,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-009
+- id: control-plane-ask-and-kill-switch-009
   tool: Bash
-  input: 'echo ''enabled: false'' > .damagecontrol.yml  # allow: I really want to'
+  input: 'echo ''enabled: false'' > .damagecontrol.yml  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-010
+- id: control-plane-ask-and-kill-switch-010
   tool: Bash
   input: 'echo ''enabled: false'' > .damagecontrol.yml'
   context:
@@ -934,25 +934,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::BASH_WRITES
-- id: control-plane-hatch-and-kill-switch-011
+- id: control-plane-ask-and-kill-switch-011
   tool: Bash
-  input: 'ln -sf /tmp/x ~/.agentwire/damagecontrol.yml  # allow: I really want to'
+  input: 'ln -sf /tmp/x ~/.agentwire/damagecontrol.yml  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-012
+- id: control-plane-ask-and-kill-switch-012
   tool: Bash
   input: ln -sf /tmp/x ~/.agentwire/damagecontrol.yml
   context:
@@ -961,25 +961,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-013
+- id: control-plane-ask-and-kill-switch-013
   tool: Bash
-  input: 'tar xf /tmp/a.tar -C ~/.claude/hooks  # allow: I really want to'
+  input: 'tar xf /tmp/a.tar -C ~/.claude/hooks  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-014
+- id: control-plane-ask-and-kill-switch-014
   tool: Bash
   input: tar xf /tmp/a.tar -C ~/.claude/hooks
   context:
@@ -988,25 +988,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-015
+- id: control-plane-ask-and-kill-switch-015
   tool: Bash
-  input: 'patch ~/.claude/settings.json /tmp/p.diff  # allow: I really want to'
+  input: 'patch ~/.claude/settings.json /tmp/p.diff  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-016
+- id: control-plane-ask-and-kill-switch-016
   tool: Bash
   input: patch ~/.claude/settings.json /tmp/p.diff
   context:
@@ -1015,25 +1015,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-017
+- id: control-plane-ask-and-kill-switch-017
   tool: Bash
-  input: 'printf ''rm %s'' ~/.claude/settings.json | sh  # allow: I really want to'
+  input: 'printf ''rm %s'' ~/.claude/settings.json | sh  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-018
+- id: control-plane-ask-and-kill-switch-018
   tool: Bash
   input: printf 'rm %s' ~/.claude/settings.json | sh
   context:
@@ -1042,25 +1042,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-019
+- id: control-plane-ask-and-kill-switch-019
   tool: Bash
-  input: 'echo x >| ~/.agentwire/damagecontrol.yml  # allow: I really want to'
+  input: 'echo x >| ~/.agentwire/damagecontrol.yml  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-020
+- id: control-plane-ask-and-kill-switch-020
   tool: Bash
   input: echo x >| ~/.agentwire/damagecontrol.yml
   context:
@@ -1069,25 +1069,25 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-021
+- id: control-plane-ask-and-kill-switch-021
   tool: Bash
-  input: 'echo x | tee ~/.agentwire/config.yaml /tmp/my-app.log  # allow: I really want to'
+  input: 'echo x | tee ~/.agentwire/config.yaml /tmp/my-app.log  # ask: I really want to'
   context:
     ruleset: full
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::INDIRECT_WRITES
-- id: control-plane-hatch-and-kill-switch-022
+- id: control-plane-ask-and-kill-switch-022
   tool: Bash
   input: echo x | tee ~/.agentwire/config.yaml /tmp/my-app.log
   context:
@@ -1096,7 +1096,7 @@
   expect:
     decision: block
     protected: true
-  class: control-plane-hatch-and-kill-switch
+  class: control-plane-ask-and-kill-switch
   tags:
   - control-plane
   - variant:kill-switch-off
@@ -1367,7 +1367,7 @@
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-002
   tool: Bash
-  input: 'agentwire tasks promote  # allow: I really want to'
+  input: 'agentwire tasks promote  # ask: I really want to'
   context:
     ruleset: full
   expect:
@@ -1376,7 +1376,7 @@
   class: promote-blocked
   tags:
   - promote
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-003
   tool: Bash
@@ -1420,7 +1420,7 @@
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-006
   tool: Bash
-  input: 'agentwire tasks promote --yes  # allow: I really want to'
+  input: 'agentwire tasks promote --yes  # ask: I really want to'
   context:
     ruleset: full
   expect:
@@ -1429,7 +1429,7 @@
   class: promote-blocked
   tags:
   - promote
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-007
   tool: Bash
@@ -1473,7 +1473,7 @@
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-010
   tool: Bash
-  input: 'uv run agentwire tasks promote --yes  # allow: I really want to'
+  input: 'uv run agentwire tasks promote --yes  # ask: I really want to'
   context:
     ruleset: full
   expect:
@@ -1482,7 +1482,7 @@
   class: promote-blocked
   tags:
   - promote
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-011
   tool: Bash
@@ -1526,7 +1526,7 @@
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-014
   tool: Bash
-  input: 'python3 -m agentwire tasks promote --yes  # allow: I really want to'
+  input: 'python3 -m agentwire tasks promote --yes  # ask: I really want to'
   context:
     ruleset: full
   expect:
@@ -1535,7 +1535,7 @@
   class: promote-blocked
   tags:
   - promote
-  - variant:hatch
+  - variant:ask
   source: tests/unit/test_control_plane_protection.py::PROMOTE_COMMANDS
 - id: promote-blocked-015
   tool: Bash

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/corpus/cases/relative_paths.yaml

@@ -223,7 +223,7 @@
   source: tests/unit/test_relative_path_operands.py::CASES
 - id: relative-path-operand-020
   tool: Bash
-  input: 'echo x > .claude/settings.json  # allow: because'
+  input: 'echo x > .claude/settings.json  # ask: because'
   context:
     cwd: /golden/elsewhere
   expect:
@@ -284,7 +284,7 @@
   source: tests/unit/test_relative_path_operands.py::CASES
 - id: relative-path-operand-025
   tool: Bash
-  input: 'echo x > .claude/settings.json  # allow: because'
+  input: 'echo x > .claude/settings.json  # ask: because'
   context:
     cwd: /golden/home
   expect:
@@ -292,5 +292,5 @@
     protected: true
   class: relative-path-operand
   tags:
-  - escape-hatch
+  - ask-comment
   source: tests/unit/test_relative_path_operands.py::CASES

{agentwire_dev-1.77.5 → agentwire_dev-1.78.0}/corpus/golden/harvested.json

@@ -48,9 +48,9 @@
   "a[1]=x; cat <<'EOF'\nbody\nEOF\nrm -rf /",
   "agentwire msg send --to orch --kind done \"removed the rm -rf /tmp/x call\"",
   "agentwire tasks promote",
-  "agentwire tasks promote  # allow: I really want to",
+  "agentwire tasks promote  # ask: I really want to",
   "agentwire tasks promote --yes",
-  "agentwire tasks promote --yes  # allow: I really want to",
+  "agentwire tasks promote --yes  # ask: I really want to",
   "agentwire tasks promote x",
   "agentwire tasks review",
   "bash -c 'rm -rf /tmp/x'",
@@ -203,9 +203,9 @@
   "echo ${#PATH}<<'EOF'\nbody\nEOF\ngit -C ~/.agentwire checkout damagecontrol.yml",
   "echo ${#PATH}<<'EOF'\nbody\nEOF\nrm -rf /",
   "echo 'enabled: false' > .damagecontrol.yml",
-  "echo 'enabled: false' > .damagecontrol.yml  # allow: I really want to",
+  "echo 'enabled: false' > .damagecontrol.yml  # ask: I really want to",
   "echo 'enabled: false' > ~/.agentwire/damagecontrol.yml",
-  "echo 'enabled: false' > ~/.agentwire/damagecontrol.yml  # allow: I really want to",
+  "echo 'enabled: false' > ~/.agentwire/damagecontrol.yml  # ask: I really want to",
   "echo 'open(\".agentwire.tasks.yml\",\"w\")' | python3",
   "echo 'rm -rf /tmp/x' | sh",
   "echo 'roles: [agentwire]' > .agentwire.yml",
@@ -214,7 +214,7 @@
   "echo 'the ~/.claude/settings.json is' | python3 -c 'import sys,os; os.system(\"echo hi > \"+sys.stdin.read().split()[1])'",
   "echo 'x' > ~/.agentwire/scheduler.yaml",
   "echo '{}' > ~/.claude/settings.json",
-  "echo '{}' > ~/.claude/settings.json  # allow: I really want to",
+  "echo '{}' > ~/.claude/settings.json  # ask: I really want to",
   "echo README.md | xargs rm",
   "echo \\\\<<'EOF'\nbody\nEOF\ncd ~/.agentwire && touch damagecontrol.yml",
   "echo \\\\<<'EOF'\nbody\nEOF\necho x >| ~/.agentwire/damagecontrol.yml",
@@ -242,9 +242,9 @@
   "echo x > ~/.agentwire/damagecontrol.yml",
   "echo x >> /some/repo/.agentwire.tasks.yml",
   "echo x >| ~/.agentwire/damagecontrol.yml",
-  "echo x >| ~/.agentwire/damagecontrol.yml  # allow: I really want to",
+  "echo x >| ~/.agentwire/damagecontrol.yml  # ask: I really want to",
   "echo x | tee ~/.agentwire/config.yaml /tmp/my-app.log",
-  "echo x | tee ~/.agentwire/config.yaml /tmp/my-app.log  # allow: I really want to",
+  "echo x | tee ~/.agentwire/config.yaml /tmp/my-app.log  # ask: I really want to",
   "echo x | tee ~/.agentwire/damagecontrol.yml --append",
   "echo x | tee ~/.agentwire/damagecontrol.yml -a",
   "echo x | tee ~/.agentwire/scheduler.yaml # my-app",
@@ -310,8 +310,9 @@
   "git push origin main --force",
   "git reset --hard HEAD~3",
   "git reset --hard origin/main",
-  "git reset --hard origin/main  # allow:  ",
   "git reset --hard origin/main  # allow: sync to remote",
+  "git reset --hard origin/main  # ask:  ",
+  "git reset --hard origin/main  # ask: sync to remote",
   "git stash && psql -c \"DROP TABLE users\"",
   "git status",
   "grep -c TOKEN .env",
@@ -330,7 +331,7 @@
   "kill -9 -1",
   "ln -s ~/.agentwire/damagecontrol.yml /tmp/link",
   "ln -sf /tmp/x ~/.agentwire/damagecontrol.yml",
-  "ln -sf /tmp/x ~/.agentwire/damagecontrol.yml  # allow: I really want to",
+  "ln -sf /tmp/x ~/.agentwire/damagecontrol.yml  # ask: I really want to",
   "ln -sf /tmp/x ~/.claude/settings.json",
   "ls $(pwd)/sub",
   "ls -la",
@@ -347,13 +348,13 @@
   "npm run build",
   "npm unpublish left-pad",
   "patch ~/.claude/settings.json /tmp/p.diff",
-  "patch ~/.claude/settings.json /tmp/p.diff  # allow: I really want to",
+  "patch ~/.claude/settings.json /tmp/p.diff  # ask: I really want to",
   "perl -e 'open(F, \">\", \".agentwire.tasks.yml\")'",
   "perl -e 'open(F, \">\", \"~/.claude/settings.json\")'",
   "perl -e 'print \"see ~/.claude/settings.json by hand\"'",
   "perl -e 'unlink glob(\"/important/*\")'",
   "printf 'rm %s' ~/.claude/settings.json | sh",
-  "printf 'rm %s' ~/.claude/settings.json | sh  # allow: I really want to",
+  "printf 'rm %s' ~/.claude/settings.json | sh  # ask: I really want to",
   "psql -c \"$(cat drop.sql)\"",
   "psql -c \"DROP DATABASE prod\"",
   "psql -c \"SELECT 1\"",
@@ -374,7 +375,7 @@
   "python3 -c 'import subprocess; subprocess.run([\"cp\",\"/tmp/a\",\"~/.claude/settings.json is x\"])'",
   "python3 -c 'open(\".agentwire.tasks.yml\", \"w\").write(\"x\")'",
   "python3 -m agentwire tasks promote --yes",
-  "python3 -m agentwire tasks promote --yes  # allow: I really want to",
+  "python3 -m agentwire tasks promote --yes  # ask: I really want to",
   "python3 -m pytest tests/unit",
   "r\"\"m -rf /x",
   "r''m -rf /x",
@@ -383,7 +384,7 @@
   "rm -rf /",
   "rm -rf /x",
   "rm ~/.agentwire/damage-control/core.yaml",
-  "rm ~/.agentwire/damage-control/core.yaml  # allow: I really want to",
+  "rm ~/.agentwire/damage-control/core.yaml  # ask: I really want to",
   "sed 's|x|y|' notes.txt > dist/out.js",
   "sed -i \"s|a|$(echo dist/x)|\" notes.txt",
   "sed -i '' 's/a/b/' dist/app.js",
@@ -393,7 +394,7 @@
   "sed -i 's/a/b/e' dist/x.js",
   "sed -i 's/a/b/w dist/out.js' notes.txt",
   "sed -i 's/x/y/' ~/.agentwire/hooks/damage-control/bash-tool-damage-control.py",
-  "sed -i 's/x/y/' ~/.agentwire/hooks/damage-control/bash-tool-damage-control.py  # allow: I really want to",
+  "sed -i 's/x/y/' ~/.agentwire/hooks/damage-control/bash-tool-damage-control.py  # ask: I really want to",
   "sh -c 'psql -c \"DROP TABLE users\"'",
   "sh <<EOF\nrm ~/.agentwire/damagecontrol.yml\nEOF",
   "ssh host 'rm -rf /tmp/x'",
@@ -401,7 +402,7 @@
   "ssh prod \"$(cat dangerous.sh)\"",
   "sudo rm -rf /tmp/x",
   "tar xf /tmp/a.tar -C ~/.claude/hooks",
-  "tar xf /tmp/a.tar -C ~/.claude/hooks  # allow: I really want to",
+  "tar xf /tmp/a.tar -C ~/.claude/hooks  # ask: I really want to",
   "tee \"/some/repo/.agentwire.tasks.yml\" < /tmp/x",
   "tmux -L sock kill-server",
   "tmux -L sock list-sessions",
@@ -412,7 +413,7 @@
   "uv run $(echo rm) -rf /srv/x",
   "uv run --extra dev pytest tests/unit -q",
   "uv run agentwire tasks promote --yes",
-  "uv run agentwire tasks promote --yes  # allow: I really want to",
+  "uv run agentwire tasks promote --yes  # ask: I really want to",
   "uv run amo status 2>&1",
   "uv run bash -c 'git push --force origin main'",
   "uv run bash -c 'rm -rf /tmp/x'",