Copy the agentaccess.txt from the case that matches yours into the directory you want to govern, and edit the identifiers and paths. Identifiers come from the registry; matching semantics are in the spec (§5–§6).
$ anchoring, wildcards, and a per-file carve-out.Each file governs the directory that contains it and everything beneath it; the nearest file wins, with no merging from ancestors (§4).