From 452535de7dc575f8563cd4c124681157db08b707 Mon Sep 17 00:00:00 2001
From: Ed_ <edwardgz@gmail.com>
Date: Fri, 26 Jun 2026 17:50:38 -0400
Subject: [PATCH] deny using yet another tmp folder external to the repo

---
 conductor/tier2/opencode.json.fragment | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/conductor/tier2/opencode.json.fragment b/conductor/tier2/opencode.json.fragment
index 3594b3b6..68569558 100644
--- a/conductor/tier2/opencode.json.fragment
+++ b/conductor/tier2/opencode.json.fragment
@@ -48,6 +48,11 @@
       "*GetTempPath*": "deny",
       "*gettempdir*": "deny",
       "*mkstemp*": "deny",
+      "*C:/tmp*": "deny",
+      "*C:\\tmp*": "deny",
+      "*c:/tmp*": "deny",
+      "*c:\\tmp*": "deny",
+      "*/c/tmp*": "deny",
       "git push*": "deny",
       "git checkout*": "deny",
       "git restore*": "deny",
@@ -87,6 +92,11 @@
           "*GetTempPath*": "deny",
           "*gettempdir*": "deny",
           "*mkstemp*": "deny",
+          "*C:/tmp*": "deny",
+          "*C:\\tmp*": "deny",
+          "*c:/tmp*": "deny",
+          "*c:\\tmp*": "deny",
+          "*/c/tmp*": "deny",
           "git push*": "deny",
           "git checkout*": "deny",
           "git restore*": "deny",