diff --git a/config/pi/agent/extensions/pi-permission-system/config.json b/config/pi/agent/extensions/pi-permission-system/config.json
index d819ccd..7076b2d 100644
--- a/config/pi/agent/extensions/pi-permission-system/config.json
+++ b/config/pi/agent/extensions/pi-permission-system/config.json
@@ -7,7 +7,8 @@
       "~/.ssh/*": "deny",
       "*.env": "deny",
       "*.env.*": "deny",
-      "*.env.example": "allow"
+      "*.env.example": "allow",
+      "/tmp/*": "ask"
     },
     "bash": {
       "*": "ask",
@@ -15,7 +16,7 @@
       "sudo *": "ask"
     },
     "external_directory": {
-      "*": "deny",
+      "*": "ask",
       "~/Documents/sjb-brain/*": "allow"
     }
   },