Updated Edit
Reconcile profile and shared-settings permission rules (deny, ask, allow) to the canonical guardrail model; pass exactly one of --dry-run or --apply.
#c reconcile-permissions
reconcile profile and shared-settings permissions (deny/ask/allow) to the canonical guardrail model; requires exactly one of --dry-run or --apply
#Flags
| Name | Short | Type | Default | Env | Description |
|---|---|---|---|---|---|
--dry-run | bool | print the per-target permissions diff and change NOTHING (mutually exclusive with --apply; you MUST pass exactly one of --dry-run or --apply) | |||
--apply | bool | perform the reconciliation, writing each target atomically (mutually exclusive with --dry-run; you MUST pass exactly one of --dry-run or --apply) | |||
--profile | str | reconcile only this single profile; when given, shared-settings.json profileDefaults is left untouched (omit to reconcile every profile AND shared-settings profileDefaults) |