diff --git a/novel/.opencode/agent/Importer.md b/novel/.opencode/agent/Importer.md
index 0aa691e..ae873e8 100644
--- a/novel/.opencode/agent/Importer.md
+++ b/novel/.opencode/agent/Importer.md
@@ -5,7 +5,14 @@ mode: subagent
 temperature: 0.2
 permission:
   bash:
-    "*": "ask"
+    "*": "allow"
+    "rm -rf *": "deny"
+    "rm -rf /*": "deny"
+    "sudo *": "deny"
+    "mkfs*": "deny"
+    "diskutil *": "deny"
+    "shutdown *": "deny"
+    "reboot*": "deny"
   edit:
     "**/*.md": "allow"
     "**/DATA/**": "allow"
diff --git a/novel/.opencode/agent/OpenNovelAgent.md b/novel/.opencode/agent/OpenNovelAgent.md
index 0986264..abf86bd 100644
--- a/novel/.opencode/agent/OpenNovelAgent.md
+++ b/novel/.opencode/agent/OpenNovelAgent.md
@@ -6,10 +6,14 @@ temperature: 0.8
 permission:
   question: "allow"
   bash:
-    "*": "ask"
+    "*": "allow"
     "rm -rf *": "deny"
     "rm -rf /*": "deny"
     "sudo *": "deny"
+    "mkfs*": "deny"
+    "diskutil *": "deny"
+    "shutdown *": "deny"
+    "reboot*": "deny"
   edit:
     "**/*.env*": "deny"
     "**/*.key": "deny"