diff --git a/conductor/tier2/opencode.json.fragment b/conductor/tier2/opencode.json.fragment
index e31faf1a..d169e4ad 100644
--- a/conductor/tier2/opencode.json.fragment
+++ b/conductor/tier2/opencode.json.fragment
@@ -6,15 +6,11 @@
     "edit": "deny",
     "read": {
       "*": "deny",
-      "C:\\projects\\manual_slop_tier2\\**": "allow",
-      "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2\\**": "allow",
-      "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2_failures\\**": "allow"
+      "C:\\projects\\manual_slop_tier2\\**": "allow"
     },
     "write": {
       "*": "deny",
-      "C:\\projects\\manual_slop_tier2\\**": "allow",
-      "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2\\**": "allow",
-      "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2_failures\\**": "allow"
+      "C:\\projects\\manual_slop_tier2\\**": "allow"
     },
     "bash": {
       "*": "deny",
@@ -43,6 +39,7 @@
       "uv run python scripts/run_tests_batched.py*": "allow",
       "uv run python scripts/tier2/*": "allow",
       "pwsh -File scripts/tier2/*": "allow",
+      "*AppData\\*": "deny",
       "*AppData\\Local\\Temp\\*": "deny",
       "git push*": "deny",
       "git checkout*": "deny",
@@ -58,18 +55,15 @@
         "edit": "allow",
         "read": {
           "*": "deny",
-          "C:\\projects\\manual_slop_tier2\\**": "allow",
-          "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2\\**": "allow",
-          "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2_failures\\**": "allow"
+          "C:\\projects\\manual_slop_tier2\\**": "allow"
         },
         "write": {
           "*": "deny",
-          "C:\\projects\\manual_slop_tier2\\**": "allow",
-          "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2\\**": "allow",
-          "C:\\Users\\Ed\\AppData\\Local\\manual_slop\\tier2_failures\\**": "allow"
+          "C:\\projects\\manual_slop_tier2\\**": "allow"
         },
         "bash": {
           "*": "allow",
+          "*AppData\\*": "deny",
           "*AppData\\Local\\Temp\\*": "deny",
           "git push*": "deny",
           "git checkout*": "deny",