SHELL_DENYLIST_FILE

const SHELL_DENYLIST_FILE: "shell-denylist.json" = 'shell-denylist.json'

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/constants.ts:55

[[EXT-107]]: project-scoped persisted shell deny-list — the escalation menu’s always reject choice. Its mirror on the refusal side, in the same directory and the same EXT-71 entry grammar, so the two files read identically to anyone who opens them.

A separate file rather than a second array in SHELL_ALLOWLIST_FILE: the two lists have opposite failure modes, and a parse error that took the refusals down with the approvals would fail in the one direction this design never lets anything fail in.