# Recipes

These are "cookbook" guides for common workflows. Most follow the same loop:

1. Start with a restrictive config
2. Run with monitor mode (`-m`) to see what gets blocked
3. Allow the minimum domains/paths needed

## Package installs

- [npm install](npm-install.md)
- [pip / poetry](pip-poetry.md)

## Git / fetching code

- [git clone / git fetch](git-clone.md)

## CI

- [CI jobs](ci.md)