Configuration

Key options in cordis.patch.yml (all have defaults):

Option	Default	Description
`modePreset`	`"auto"`	Permission preset this plugin owns. Empty = observe all sessions.
`dryRun`	`true`	Shadow mode: decide + record, but always delegate. Set `false` to enforce.
`hardDeny`	exfil, curl pipe, …	Regexes that always deny.
`sensitiveDeny`	`.ssh/`, `.env`, …	Sensitive targets: deny + safer-alternative guidance.
`allowCommands`	`trash *`, `git status`, …	CC-style prefix globs. Zero-LLM auto-allow.
`allowPaths`	`[]`	Curated full-trust directories. Danger-full-access writes here auto-allow.
`breakerConsecutive`	`3`	Consecutive DENY count to trip the breaker.
`breakerTotal`	`20`	Total DENY count to trip the breaker.
`timeoutMs`	`45000`	Classifier call timeout.
`classifyContextChars`	`6000`	Context budget for task-alignment input.
`preExecuteGate`	`true`	Enable the pre-execute deny-band + escalation pre-screen.

dsh-auto-mode