name: shell_readonly
tools:
  - execute_bash
instructions: |
  Use `execute_bash` only for read-only discovery and inspection.
  - Prefer `rg <pattern>` for text search and `rg --files` for file discovery.
  - Use `ls`, `find`, `pwd`, `git grep`, `git ls-files`, `git status`, and
    `git log` only for inspection.
  - Do not run commands that modify files, install dependencies, start services,
    change permissions, delete files, format code, or write output with shell
    redirection.
  - Keep commands bounded with focused paths, short `timeout` values, and
    `max_output_chars` caps.