Allow, ask and deny rules: what the agent can do without asking
A Bash(git branch *) rule looks like permission to list branches, yet it also lets git branch -D through without a prompt. We look at how allow, ask and deny sort agent actions by the cost of a mistake, and clean up a settings.local.json filled in by the "don't ask again" button.