Hey, you laid it out correctly, and thanks for not just pointing it out here but also filing a separate feature request Configurable read-only shell access in Ask Mode. That’s the right place where we track this.
Quick status update: the original block was tightened for write safety, and on environments where the OS sandbox isn’t available (like Windows in your case), Shell in Ask mode is currently disabled entirely, with no allowlist-aware middle option. So read-only commands like git log, git diff, and git status got caught by the same block as mutating ones, yes, it’s broader than we’d like.
All three items in your request are logged, including that the agent fails the command silently and doesn’t mention the block in the main reply. It’s on the team’s radar, but I can’t share a timeline yet.
It makes sense to keep further discussion in your FR thread so the context and votes stay in one place. I’ll follow up when there’s an update.