diff --git a/.opencode/agents/bug-hunt-pool-supervisor.md b/.opencode/agents/bug-hunt-pool-supervisor.md
index 046eea08e..2739e07a5 100644
--- a/.opencode/agents/bug-hunt-pool-supervisor.md
+++ b/.opencode/agents/bug-hunt-pool-supervisor.md
@@ -30,8 +30,10 @@ permission:
     "wc *": allow
     "head *": allow
     "tail *": allow
+    # Cleanup (mandatory on exit):
+    "rm -rf /tmp/*": allow
     # Read-only git commands:
-    "git clone*"
+    "git clone*": allow
     "git log*": allow
     "git status*": allow
     "git diff*": allow