diff --git a/Releases/v5.0.0/.claude/PAI/DOCUMENTATION/Security/Patterns.example.yaml b/Releases/v5.0.0/.claude/PAI/DOCUMENTATION/Security/Patterns.example.yaml index d665a5e4bb..f88497b1fc 100755 --- a/Releases/v5.0.0/.claude/PAI/DOCUMENTATION/Security/Patterns.example.yaml +++ b/Releases/v5.0.0/.claude/PAI/DOCUMENTATION/Security/Patterns.example.yaml @@ -23,9 +23,9 @@ bash: # BLOCKED — Hard deny via exit(2). No prompt, no workaround. blocked: # ── Filesystem destruction ──────────────────────────────────── - - pattern: "rm\\s.*-\\w*r.*\\s+/(\\s|$)" + - pattern: "\\brm\\s.*-\\w*r.*\\s+/(\\s|$)" reason: "Recursive deletion of system root" - - pattern: "rm\\s.*-\\w*r.*\\s+~/?(\\s|$)" + - pattern: "\\brm\\s.*-\\w*r.*\\s+~/?(\\s|$)" reason: "Recursive deletion of home directory" # ── Credential access via shell ────────────────────────────── diff --git a/Releases/v5.0.0/.claude/PAI/USER/SECURITY/PATTERNS.yaml b/Releases/v5.0.0/.claude/PAI/USER/SECURITY/PATTERNS.yaml index d035a42f65..638001ce52 100644 --- a/Releases/v5.0.0/.claude/PAI/USER/SECURITY/PATTERNS.yaml +++ b/Releases/v5.0.0/.claude/PAI/USER/SECURITY/PATTERNS.yaml @@ -27,17 +27,17 @@ bash: - pattern: ^rm\s+(?!.*\.\.).*\bPAI_RELEASES(/|\b) reason: PAI release rebuild — staging dir, regenerated by ShadowRelease.ts blocked: - - pattern: rm\s.*-\w*r.*\s+/(\s|$) + - pattern: \brm\s.*-\w*r.*\s+/(\s|$) reason: Recursive deletion of system root (/). - - pattern: rm\s.*-\w*r.*\s+~/?(\s|$) + - pattern: \brm\s.*-\w*r.*\s+~/?(\s|$) reason: Recursive deletion of home directory (~) - - pattern: rm\s.*-\w*r.*\s(~/\.claude|/Users/[^/]+/\.claude|\$HOME/\.claude)/?(\s|$|;|&&) + - pattern: \brm\s.*-\w*r.*\s(~/\.claude|/Users/[^/]+/\.claude|\$HOME/\.claude)/?(\s|$|;|&&) reason: Recursive deletion of ~/.claude (entire PAI infrastructure) - - pattern: rm\s.*-\w*r.*\s(~/\.claude|/Users/[^/]+/\.claude|\$HOME/\.claude)/PAI/?(\s|$|;|&&) + - pattern: \brm\s.*-\w*r.*\s(~/\.claude|/Users/[^/]+/\.claude|\$HOME/\.claude)/PAI/?(\s|$|;|&&) reason: Recursive deletion of PAI directory - - pattern: rm\s.*-\w*r.*\s(~/\.claude|/Users/[^/]+/\.claude|\$HOME/\.claude)/PAI/MEMORY/?(\s|$|;|&&) + - pattern: \brm\s.*-\w*r.*\s(~/\.claude|/Users/[^/]+/\.claude|\$HOME/\.claude)/PAI/MEMORY/?(\s|$|;|&&) reason: Recursive deletion of PAI/MEMORY directory - - pattern: rm\s.*-\w*r.*\s+~/Projects/?(\s|$|;|&&) + - pattern: \brm\s.*-\w*r.*\s+~/Projects/?(\s|$|;|&&) reason: Recursive deletion of ~/Projects - pattern: diskutil eraseDisk reason: Disk destruction