[
  {
    "action": "shell",
    "resource": "*",
    "effect": "allow"
  },
  {
    "action": "shell",
    "resource": "git push *",
    "effect": "ask"
  },
  {
    "action": "shell",
    "resource": "rm *",
    "effect": "deny"
  },
  {
    "action": "shell",
    "resource": "rm -f safe-proof.txt",
    "effect": "allow"
  }
]