Fragments (highest priority first): org-baseline=0, security-deny=0

── Claude Code · managed-settings → /Library/Application Support/ClaudeCode/managed-settings.json
{
  "cleanupPeriodDays" : 30,
  "deniedMcpServers" : [
    {
      "serverName" : "filesystem-unrestricted"
    }
  ],
  "permissions" : {
    "deny" : [
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(~/.ssh/**)",
      "Read(~/.aws/**)"
    ],
    "disableBypassPermissionsMode" : "disable"
  }
}

── Claude Code · managed-mcp → /Library/Application Support/ClaudeCode/managed-mcp.json
{

}

── Claude Desktop · managed-preferences → /Library/Managed Preferences/com.anthropic.claudefordesktop.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>autoUpdaterEnforcementHours</key>
	<integer>24</integer>
	<key>isDesktopExtensionDirectoryEnabled</key>
	<false/>
</dict>
</plist>

── opencode · managed-config → /Library/Application Support/opencode/opencode.json
{
  "autoupdate" : "notify",
  "disabled_providers" : [
    "openrouter"
  ],
  "permission" : {
    "bash" : "ask",
    "edit" : "ask"
  },
  "share" : "disabled"
}

── OpenAI Codex CLI · requirements → /etc/codex/requirements.toml
# Managed by Mimir (com.spectrechen.mimir). Local changes are overwritten.
allowed_approval_policies = ["untrusted", "on-request"]
allowed_sandbox_modes = ["read-only", "workspace-write"]

── OpenAI Codex CLI · managed-config → /etc/codex/managed_config.toml
# Managed by Mimir (com.spectrechen.mimir). Local changes are overwritten.
approval_policy = "on-request"
sandbox_mode = "workspace-write"

