tests:
  # ════════════════════════════════════════════════════════════════
  # sleep: always safe (just waits)
  # ════════════════════════════════════════════════════════════════
  - id: sleep-safe
    command: "sleep 5"
    expected:
      decision: allow
  - id: sleep-long-safe
    command: "sleep 60"
    expected:
      decision: allow
  - id: sleep-fractional-safe
    command: "sleep 0.5"
    expected:
      decision: allow

  # ════════════════════════════════════════════════════════════════
  # chmod: should always ask (modifies permissions)
  # ════════════════════════════════════════════════════════════════
  - id: chmod-executable-ask
    command: "chmod +x script.sh"
    expected:
      decision: ask
  - id: chmod-755-ask
    command: "chmod 755 script.sh"
    expected:
      decision: ask
  - id: chmod-recursive-ask
    command: "chmod -R +x scripts/"
    expected:
      decision: ask
