rdmbair13m5-changelog-20260916-2141-retire-invalid-agy-unsandboxed-permission-rule

Removed obsolete unsandboxed(*) rule from ~/.gemini/antigravity-cli/settings.json across the fleet, eliminating startup warnings while retaining full command(*), read_file(*), and write_file(*) bypass-equivalent permission coverage.

Summary

Antigravity CLI (agy 1.2.4) deprecated and ignores unsandboxed(...) permission rules in ~/.gemini/antigravity-cli/settings.json, emitting the warning:

Warning
    Invalid "unsandboxed" permission rules found; they are ignored and grant nothing:
       ~/.gemini/antigravity-cli/settings.json:
          unsandboxed(*)

     Fix: replace "unsandboxed" with "command" (e.g. command(git status)), or remove the rule. Edit the file directly or use /permissions.

Because the fleet-wide bypass normalization from 2026-08-24 already provisioned command(*), read_file(*), and write_file(*), the unsandboxed(*) entry was both non-functional and triggering startup noise. The rule was retired cleanly across all fleet hosts.

Scope & Target Hosts

rdmbair13m5 (local Apple Silicon): Removed unsandboxed(*), backup taken.
rdmsm4x (lead M4 Max): Removed unsandboxed(*), backup taken.
rdmbair15m5 (remote Apple Silicon): Removed unsandboxed(*), backup taken.
jdmbair13m5 (remote Apple Silicon): Removed unsandboxed(*), backup taken.
rdmpw3265m (remote Intel): Audited; already clean (0 occurrences).
rdmpw3275m (remote Intel): Audited; already clean (0 occurrences).

Exact Files Touched & Backups

Every modified host was backed up before write, preserving file mode 0600 and file ownership:

Host	File	Backup Location	Pre-edit SHA-256	Post-edit SHA-256
`rdmbair13m5`	`~/.gemini/antigravity-cli/settings.json`	`~/.gemini/antigravity-cli/settings.json.bak-20260916-213916`	`63e0119e...`	`e1461871eabb1a76d72a269878372aed6ea2b25c8fce0a8a9fbf542f9d7c9b6f`
`rdmsm4x`	`~/.gemini/antigravity-cli/settings.json`	`~/.gemini/antigravity-cli/settings.json.bak-20260916-213956`	`00185ad3...`	`259e21ec13c320b171a9a71eb3a64c2c596a087e902f771de3c7966417a0a9bb`
`rdmbair15m5`	`~/.gemini/antigravity-cli/settings.json`	`~/.gemini/antigravity-cli/settings.json.bak-20260916-214000`	`...`	`58c5592041fff37018e440d781ae206f6237d3c628036941aa9ecc4eddc8daa4`
`jdmbair13m5`	`~/.gemini/antigravity-cli/settings.json`	`~/.gemini/antigravity-cli/settings.json.bak-20260916-214003`	`...`	`07b0f902db24ec418e2cc0aa78ec4c26e54722eb935b27b19b3b057cfb4a3cf8`

Verification Evidence

Fleet audit sweep post-remediation:

=== Host: rdmsm4x ===
unsandboxed count: 0 | command(*): True | read_file(*): True | write_file(*): True | mode: 0600
=== Host: rdmbair13m5 ===
unsandboxed count: 0 | command(*): True | read_file(*): True | write_file(*): True | mode: 0600
=== Host: rdmbair15m5 ===
unsandboxed count: 0 | command(*): True | read_file(*): True | write_file(*): True | mode: 0600
=== Host: rdmpw3265m ===
unsandboxed count: 0 | command(*): True | read_file(*): True | write_file(*): True | mode: 0600
=== Host: rdmpw3275m ===
unsandboxed count: 0 | command(*): True | read_file(*): True | write_file(*): True | mode: 0600
=== Host: jdmbair13m5 ===
unsandboxed count: 0 | command(*): True | read_file(*): True | write_file(*): True | mode: 0600

All 6 hosts confirmed:

JSON valid syntax (python3 -m json.tool)
Mode 0600 permissions
Full command execution and file read/write permissions retained

How to Undo

On any host where rollback is needed:

cp -p ~/.gemini/antigravity-cli/settings.json.bak-<timestamp> ~/.gemini/antigravity-cli/settings.json

Outstanding Owner Actions

None. The remediation is complete and verified across all 6 machines.