diff --git a/legacy/.gemini/policies/coding.toml b/legacy/.gemini/policies/coding.toml
index 59c456e..dbb77db 100644
--- a/legacy/.gemini/policies/coding.toml
+++ b/legacy/.gemini/policies/coding.toml
@@ -112,3 +112,9 @@ toolName = "run_shell_command"
 commandPrefix = "echo"
 decision = "allow"
 priority = 100
+
+[[rule]]
+toolName = "run_shell_command"
+commandPrefix = "sha256sum"
+decision = "allow"
+priority = 100
diff --git a/legacy/.gemini/policies/nix-build.toml b/legacy/.gemini/policies/nix-build.toml
index e675831..abaf0ea 100644
--- a/legacy/.gemini/policies/nix-build.toml
+++ b/legacy/.gemini/policies/nix-build.toml
@@ -27,6 +27,12 @@ commandPrefix = "nix-hash"
 decision = "allow"
 priority = 100
 
+[[rule]]
+toolName = "run_shell_command"
+commandPrefix = "nix-diff"
+decision = "allow"
+priority = 100
+
 [[rule]]
 toolName = "run_shell_command"
 commandPrefix = "nix flake check"