{
  "permissions": {
    "allow": [
      "Read(//home/jashton/.local/state/nix/profiles/**)",
      "Read(//nix/var/nix/profiles/**)",
      "Read(//nix/store/**)",
      "Bash(systemctl --user show-environment)",
      "Bash(nix eval *)",
      "Bash(nix-instantiate --parse /home/jashton/.dotfiles/home/jashton.nix)",
      "Bash(git -C /home/jashton/.dotfiles status)",
      "Bash(git -C /home/jashton/.dotfiles log -3 --stat)",
      "Bash(gh api *)"
    ]
  }
}