settings-local-json-wildcards-supersede-specific-entries
settings.local.json permissions.allow accumulates specific path entries over time (e.g., Edit(/root/aj-workspace/file.py)) that are fully subsumed once a wildcard pattern (Edit(/root/aj-workspace/**)) is added — but both entries remain, inflating the file past the 170-entry hygiene threshold. When adding a wildcard, audit and remove all specific entries it covers in the same commit; the net result is expanded capability with reduced entry count.