pub(crate) const GEMINI_DENY_ALL_TOOLS_POLICY: &str = "\
[[rule]]
toolName = \"*\"
decision = \"deny\"
priority = 999
[[rule]]
toolName = \"*\"
mcpName = \"*\"
decision = \"deny\"
priority = 999
";Expand description
The Gemini policy that denies every tool, built-in and MCP. Written to
disk for --policy. Checked against the pinned CLI (0.60.0) by
capturing its request: with this policy the request declares no tools
at all, even with --yolo on.