fix: configure explicit subagent permissions for autonomous operation

.kilo/agents/code-skeptic.md

@@ -4,7 +4,10 @@ mode: all
 model: ollama-cloud/gpt-oss-120b
 color: "#E11D48"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "the-fixer": allow
+    "performance-engineer": allow
 ---
 
 # Kilo Code: Code Skeptic

.kilo/agents/evaluator.md

@@ -4,7 +4,10 @@ mode: all
 model: ollama-cloud/gpt-o3
 color: "#047857"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "prompt-optimizer": allow
+    "product-owner": allow
 ---
 
 # Kilo Code: Evaluator

.kilo/agents/lead-developer.md

@@ -4,7 +4,9 @@ mode: all
 model: ollama-cloud/deepseek-v3.2
 color: "#DC2626"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "code-skeptic": allow
 ---
 
 # Kilo Code: Lead Developer

.kilo/agents/orchestrator.md

@@ -4,7 +4,23 @@ mode: all
 model: ollama-cloud/glm-5
 color: "#7C3AED"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "history-miner": allow
+    "system-analyst": allow
+    "sdet-engineer": allow
+    "lead-developer": allow
+    "code-skeptic": allow
+    "the-fixer": allow
+    "performance-engineer": allow
+    "security-auditor": allow
+    "release-manager": allow
+    "evaluator": allow
+    "prompt-optimizer": allow
+    "product-owner": allow
+    "requirement-refiner": allow
+    "frontend-developer": allow
+    "agent-architect": allow
 ---
 
 # Kilo Code: Orchestrator

.kilo/agents/performance-engineer.md

@@ -4,7 +4,10 @@ mode: all
 model: ollama-cloud/nemotron-3-super
 color: "#0D9488"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "the-fixer": allow
+    "security-auditor": allow
 ---
 
 # Kilo Code: Performance Engineer

.kilo/agents/release-manager.md

@@ -4,7 +4,9 @@ mode: all
 model: ollama-cloud/devstral-2-123b
 color: "#581C87"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "evaluator": allow
 ---
 
 # Kilo Code: Release Manager

.kilo/agents/requirement-refiner.md

@@ -4,7 +4,10 @@ mode: all
 model: ollama-cloud/kimi-k2-thinking
 color: "#4F46E5"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "history-miner": allow
+    "system-analyst": allow
 ---
 
 # Kilo Code: Requirement Refiner

.kilo/agents/sdet-engineer.md

@@ -4,7 +4,9 @@ mode: all
 model: ollama-cloud/qwen3-coder-next
 color: "#8B5CF6"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "lead-developer": allow
 ---
 
 # Kilo Code: SDET Engineer

.kilo/agents/security-auditor.md

@@ -4,7 +4,10 @@ mode: all
 model: ollama-cloud/glm-4.7
 color: "#7F1D1D"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "the-fixer": allow
+    "release-manager": allow
 ---
 
 # Kilo Code: Security Auditor

.kilo/agents/the-fixer.md

@@ -4,7 +4,10 @@ mode: all
 model: ollama-cloud/minimax-m2.7
 color: "#F59E0B"
 permission:
-  task: allow
+  task:
+    "*": deny
+    "code-skeptic": allow
+    "orchestrator": allow
 ---
 
 # Kilo Code: The Fixer