<?xml version="1.0" encoding="UTF-8"?><oembed><type>video</type><version>1.0</version><html>&lt;iframe src=&quot;https://www.loom.com/embed/93ff56e922724394b6c64d9511626a6a&quot; frameborder=&quot;0&quot; width=&quot;1626&quot; height=&quot;1219&quot; webkitallowfullscreen mozallowfullscreen allowfullscreen&gt;&lt;/iframe&gt;</html><height>1219</height><width>1626</width><provider_name>Loom</provider_name><provider_url>https://www.loom.com</provider_url><thumbnail_height>1219</thumbnail_height><thumbnail_width>1626</thumbnail_width><thumbnail_url>https://cdn.loom.com/sessions/thumbnails/93ff56e922724394b6c64d9511626a6a-1db3f207710d858b.gif</thumbnail_url><duration>98.247</duration><title>Merging Org and Personal Command Deny Lists 🔒</title><description>In this demo, I merge org level and personal profile level deny lists for a team. Here, the team has a command deny list that blocks all git commands and forces the agent to ask for permission before running any git command. The profile editor now shows these defaults so users can add commands, and the lists are deduplicated so org enforced items cannot be re added. Users can remove personal deny list items but cannot remove org level ones. I also check that the agent is obeying these rules.</description></oembed>