# Write-Back Policy

With the plugin, a JSON file decides what may be proposed from this machine. With no policy, an agent may propose on its own, and the reminder stays off.

## Turn the Reminder On, or Stop Proposals

Put one of these in `~/.conscius/policy.json`. The first turns the end-of-task reminder on. The second stops proposals.

```json
{ "write_back": "on" }

{ "write_back": "off" }
```

## Where It Goes

The first one found wins.

| Where | For |
| --- | --- |
| `/Library/Application Support/Conscius/policy.json` (macOS), `/etc/conscius/policy.json` (Linux), `%ProgramData%\Conscius\policy.json` (Windows) | A company's managed policy. Users can't override it. |
| `CONSCIUS_POLICY` | A file named in the environment |
| `.conscius/policy.json` in the project | One project |
| `~/.conscius/policy.json` | One person |

## A Fuller Example

```json
{
  "write_back": "ask",
  "allow_source_domains": ["python.org", "docs.github.com", "postgresql.org"],
  "block_source_domains": ["corp.example.com"],
  "block_terms": ["Project Falcon", "Acme Internal"],
  "allow_properties": ["latest stable version", "release date", "license"]
}
```

## The Main Options

| Option | What it does |
| --- | --- |
| `write_back` | `on` (proposals are allowed, and the reminder runs), `ask` (the same, and the tool asks the user to approve each proposal, where it can ask), or `off` (nothing is proposed, and the reminder stays quiet). |
| `allow_source_domains` | If set, only facts from these domains are proposed. A domain covers its subdomains; `*.example.com` means subdomains only. |
| `block_source_domains` | Never these. |
| `block_terms` | Never a proposal containing one of these, as whole words, in any field. Client names and project code names go here. |
| `allow_properties` | If set, only these properties, by the words agents use. |

A file that can't be read or parsed turns write-back off until it's fixed. Whatever the policy says, a proposal citing a private or local address is refused.

## Rolling It Out to a Company

Put the policy at the managed path with your device management. For a cautious start, ship `{"write_back": "off"}`: reads work, and nothing is sent.

[All the options, in the plugin's README](https://github.com/conscius-labs/conscius-plugin#the-write-back-policy)

---

Source: https://consci.us/docs/policy