The bash: comment in the README's MCP Servers → Built-in Tools tools: example misrepresented both omission and [] as yielding a "safe-command default" — a concept that doesn't exist. In reality, omitting bash: gives unrestricted access and bash: [] disables bash entirely.

Summary

Corrected the comment to match actual behavior (consistent with docs/tools.md and src/engine.rs):

  # Bash command allow-list. Omit or use [":*"] for unrestricted access;
  # set to [] to disable bash entirely. See docs/tools.md.

Test plan

Documentation-only change; no code paths affected.