style(learnings): cargo fmt guard.rs after allow annotations

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Test User

crates/terraphim_agent/src/learnings/guard.rs

@@ -81,48 +81,119 @@ impl GuardDecision {
 
 /// Known-safe command patterns (exact matches or prefixes).
 const ALLOW_PATTERNS: &[&str] = &[
-    "ls", "ll", "dir",
-    "cat", "head", "tail", "less", "more",
-    "echo", "printf",
-    "pwd", "whoami", "uname", "date", "uptime",
-    "grep", "rg", "find", "fd",
-    "git status", "git log", "git diff", "git show", "git branch",
-    "git push", "git pull", "git fetch", "git clone", "git checkout",
-    "git add", "git commit", "git merge", "git rebase", "git cherry-pick",
-    "cargo check", "cargo clippy", "cargo fmt", "cargo doc",
-    "terraform plan", "terraform validate", "terraform show",
-    "docker ps", "docker images", "docker logs",
-    "kubectl get", "kubectl describe", "kubectl logs",
-    "tar -tvf", "tar --list",
-    "zipinfo", "unzip -l",
-    "md5sum", "sha256sum", "sha1sum",
-    "wc", "sort", "uniq", "cut", "awk", "sed", "tr",
-    "which", "whereis", "type",
-    "env", "printenv",
+    "ls",
+    "ll",
+    "dir",
+    "cat",
+    "head",
+    "tail",
+    "less",
+    "more",
+    "echo",
+    "printf",
+    "pwd",
+    "whoami",
+    "uname",
+    "date",
+    "uptime",
+    "grep",
+    "rg",
+    "find",
+    "fd",
+    "git status",
+    "git log",
+    "git diff",
+    "git show",
+    "git branch",
+    "git push",
+    "git pull",
+    "git fetch",
+    "git clone",
+    "git checkout",
+    "git add",
+    "git commit",
+    "git merge",
+    "git rebase",
+    "git cherry-pick",
+    "cargo check",
+    "cargo clippy",
+    "cargo fmt",
+    "cargo doc",
+    "terraform plan",
+    "terraform validate",
+    "terraform show",
+    "docker ps",
+    "docker images",
+    "docker logs",
+    "kubectl get",
+    "kubectl describe",
+    "kubectl logs",
+    "tar -tvf",
+    "tar --list",
+    "zipinfo",
+    "unzip -l",
+    "md5sum",
+    "sha256sum",
+    "sha1sum",
+    "wc",
+    "sort",
+    "uniq",
+    "cut",
+    "awk",
+    "sed",
+    "tr",
+    "which",
+    "whereis",
+    "type",
+    "env",
+    "printenv",
     "history",
-    "man", "help", "info",
-    "clear", "reset",
-    "true", "false",
+    "man",
+    "help",
+    "info",
+    "clear",
+    "reset",
+    "true",
+    "false",
     "exit",
 ];
 
 /// Known-dangerous command patterns (substring matches).
 const DENY_PATTERNS: &[&str] = &[
-    "rm -rf /", "rm -rf /*", "rm -rf ~", "rm -rf $HOME",
-    "mkfs", "mkfs.ext", "mkfs.xfs", "mkfs.btrfs",
-    "dd if=/dev/zero", "dd if=/dev/random", "dd if=/dev/urandom",
-    ":(){ :|:& };:", "fork bomb",
-    "> /dev/sda", "> /dev/hda", "> /dev/nvme",
-    "chmod -R 777 /", "chmod -R 000 /",
+    "rm -rf /",
+    "rm -rf /*",
+    "rm -rf ~",
+    "rm -rf $HOME",
+    "mkfs",
+    "mkfs.ext",
+    "mkfs.xfs",
+    "mkfs.btrfs",
+    "dd if=/dev/zero",
+    "dd if=/dev/random",
+    "dd if=/dev/urandom",
+    ":(){ :|:& };:",
+    "fork bomb",
+    "> /dev/sda",
+    "> /dev/hda",
+    "> /dev/nvme",
+    "chmod -R 777 /",
+    "chmod -R 000 /",
     "mv / /dev/null",
-    "rmdir /", "rmdir /*",
+    "rmdir /",
+    "rmdir /*",
     "truncate -s 0 /",
     "shred -n 0 -z /",
-    "kill -9 -1", "kill -9 1",
-    "reboot", "shutdown", "poweroff", "halt",
-    "init 0", "init 6",
+    "kill -9 -1",
+    "kill -9 1",
+    "reboot",
+    "shutdown",
+    "poweroff",
+    "halt",
+    "init 0",
+    "init 6",
     "systemctl stop",
-    "echo .* > /etc/passwd", "echo .* > /etc/shadow",
+    "echo .* > /etc/passwd",
+    "echo .* > /etc/shadow",
 ];
 
 /// Evaluate a command and return the appropriate guard decision.
@@ -216,10 +287,7 @@ mod tests {
             evaluate_command("mkfs.ext4 /dev/sda1").tier,
             ExecutionTier::Deny
         );
-        assert_eq!(
-            evaluate_command("chmod -R 777 /").tier,
-            ExecutionTier::Deny
-        );
+        assert_eq!(evaluate_command("chmod -R 777 /").tier, ExecutionTier::Deny);
     }
 
     #[test]