Add ability to block commands

docs/templates/README.md

@@ -10,6 +10,7 @@ This directory contains Fence config templates. They are small and meant to be c
 - `pip-install.json`: allow PyPI; allow writes to workspace/tmp
 - `local-dev-server.json`: allow binding and localhost outbound; allow writes to workspace/tmp
 - `agent-api-only.json`: allow common LLM API domains; allow writes to workspace
+- `git-readonly.json`: blocks destructive commands like `git push`, `rm -rf`, etc.
 
 ## Using a template
 

docs/templates/git-readonly.json

@@ -0,0 +1,19 @@
+{
+  "network": {
+    "allowedDomains": []
+  },
+  "filesystem": {
+    "allowWrite": ["."],
+    "denyWrite": [".git"]
+  },
+  "command": {
+    "deny": [
+      "git push",
+      "git reset",
+      "git clean",
+      "git checkout --",
+      "git rebase",
+      "git merge"
+    ]
+  }
+}