settings-local-json-one-off-permissions-accumulate-as-bloat
settings.local.json accumulated 8 one-off permission entries over sessions: double-slash /tmp paths, gumlet grep one-offs, _NEW_LINE xargs artifacts, and /tmp/ cp/echo commands from single debugging sessions. These are never reusable patterns. Session-close hygiene must scan for any permission entry that is not a reusable pattern (named CLI tool, wildcard, or documented workflow) and remove it. Reduced from 207 to 200 entries by removing 7 such entries.