overwatch policies <subcommand> [options]

overwatch policies list

Security Policies
=================

Defaults:
  Action: prompt
  Timeout: 60000ms
  Session Duration: 300000ms

Server: postgres
  query, select:
    Action: allow

  insert, update:
    Action: prompt

  drop_*, delete_*:
    Action: deny

Server: filesystem
  read_file, list_directory:
    Action: allow

  write_file, delete_file:
    Action: prompt
    Paths:
      Allow: ./src/**, ./test/**
      Deny: **/.env*, **/secrets/**

Tool Shadowing:
  Enabled: true
  Check Descriptions: true
  Detect Mutations: true

overwatch policies validate

Configuration valid: overwatch.yaml

Configuration errors:

  Line 15: Invalid action 'smart' - must be allow, deny, or prompt
  Line 23: Unknown field 'analyzer' - analyzers have been removed

overwatch policies list --json

policies:
  - tools: ["write_file"]
    action: prompt
    paths:
      allow:
        - ./src/**
        - ./test/**
      deny:
        - **/.env*    # Environment files
        - ~/.ssh/**   # SSH keys
        - ~/.aws/**   # AWS credentials