diff --git a/.claude/settings.local.json.example b/.claude/settings.local.json.example
new file mode 100644
index 0000000..dfb9d30
--- /dev/null
+++ b/.claude/settings.local.json.example
@@ -0,0 +1,17 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(cat:*)",
+      "Bash(cp:*)",
+      "Bash(gh:*)",
+      "Bash(git:*)",
+      "Bash(grep:*)",
+      "Bash(make:*)",
+      "Bash(python3:*)",
+      "Bash(which:*)",
+      "Bash(wc:*)",
+      "Bash(./sync.sh:*)",
+      "WebSearch"
+    ]
+  }
+}
diff --git a/templates/AGENTS.md.template b/templates/AGENTS.md.template
index e474c13..140cd3a 100644
--- a/templates/AGENTS.md.template
+++ b/templates/AGENTS.md.template
@@ -37,8 +37,8 @@ This project uses the **Lightweight / Standard / Governed** workflow profile. Se
 
 `.codecannon.yaml` and the generated `.claude/commands/` files are committed to this repo. Every developer gets a consistent workflow on `git clone` + `git submodule update --init` — no further setup required.
 
-To update skills: `git submodule update --remote CodeCanon && CodeCanon/sync.sh`
-To reconfigure: edit `.codecannon.yaml` and re-run `CodeCanon/sync.sh`, then commit the changes.
+To update skills: `git submodule update --remote CodeCannon && CodeCannon/sync.sh`
+To reconfigure: edit `.codecannon.yaml` and re-run `CodeCannon/sync.sh`, then commit the changes.
 
 ## Agent Workflow