Read file permissions don't seem to work, potentially leaking secrets

[FlippFuzz]

Description

Kilo is still giving read access to a file specified in kilo.jsonc and .kilocodeignore

I'm following https://github.com/Kilo-Org/kilocode/blob/main/packages/kilo-docs/pages/customize/context/kilocodeignore.md

---

I expect read access to my_file.txt should be explicitly blocked by the VS Code extension locally.
The LLM must never be able to see this.

Am I doing something wrong?

Plugins

No response

Kilo version

7.4.5

Steps to reproduce

1. .kilocodeignore

my_file.txt

2. kilo.jsonc

{
  "$schema": "https://app.kilo.ai/config.json",
  "permission": {
    "read": { "my_file.txt": "deny", "*": "allow" }
  }
}

3. my_file.txt

testing111999444

4. Prompt: "Please list the contents of @my_file.txt"

Screenshot and/or share link

Operating System

Windows 11

Terminal

No response