pattern	decision	reason
./jeannie status	allow	Read-only health report.
./jeannie doctor-	allow	Read-only focused doctor command.
./jeannie capacity	allow	Read-only capacity report.
./jeannie validate	allow	Read-only repository validation.
./jeannie safety-case	allow	Read-only change safety review.
./jeannie incident	allow	Read-only incident triage/replay.
./jeannie ai-evals	allow	Read-only eval harness.
./jeannie prompt-injection-lab	allow	Read-only security lab harness.
./jeannie up	approval	High-blast-radius deployment.
./jeannie apps	approval	Application deployment can mutate cluster state.
./jeannie rpi-services	approval	Mutates RPi Docker services.
./jeannie nuke	deny	Destructive cluster state path.
tofu destroy	deny	Destructive infrastructure path.
terraform destroy	deny	Destructive infrastructure path.
rm -rf	deny	Destructive file deletion pattern.
kubectl delete	approval	Kubernetes deletion needs explicit scope and approval.
docker rm	approval	Docker deletion needs explicit scope and approval.