{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "bash",
        "hooks": [
          { "type": "command", "command": "echo 'tool output rejected by policy: rerun with a summary instead' >&2; exit 2" }
        ]
      }
    ]
  }
}