My block list for AI that runs commands without asking
My bots run overnight, so they don't wait for approval. Instead they're blocked from a short list of things that would really hurt. Everything else runs.
What's blocked
Deleting the whole disk, my home folder, or anything starting from the top of the drive
Deleting the bots' own settings and memory folders
Deleting my model storage drive
Formatting or erasing any drive
Writing directly to a disk device
Force-pushing over code on GitHub
What stays safe anyway
Anything that goes to a customer is a draft I approve.
Anything that spends money needs me.
Everything is logged.
Build your own
List the handful of things you could never undo.
Block those by pattern.
Allow the rest.
Read the logs for a week before you stop watching.