Diff
1diff --git a/src/rules.ts b/src/rules.ts
2index fb09c8aad2a0fa7a990ba79c6cbc3162e8237865..d0e8213110d61e7696f7fb73e69648f1c79c9c00 100644
3--- a/src/rules.ts
4+++ b/src/rules.ts
5@@ -159,7 +159,7 @@ Bash input is one command node, not a whole script. Evaluate that command alone.
6
7 Deny:
8 - Privilege escalation (sudo, su, doas)
9-- Destructive commands targeting system or home root paths (e.g. rm -rf /, ~, /etc, /usr).
10+- Destructive commands targeting system paths (e.g. rm -rf /, /etc, /usr).
11
12 Ask:
13 - Reading or exposing obvious secret material (~/.ssh, ~/.aws, ~/.config, .env, credentials, *.pem, *.key), don't assume anything could be secret.