feat: harden Claude Code permissions around recoverable failure - #11

Merged

bertini36 merged 8 commits into

mainfrom

feat/harden-claude-code-permissions

Aug 4, 2026

Commits on Aug 4, 2026

feat: deny reads of AWS credentials and env files

bertini36
and
claude
committed
a072a7c
feat: prompt before rm instead of denying recursive deletes

bertini36
and
claude
committed
22eba17
feat: prompt before destructive git and merge operations

bertini36
and
claude
committed
68f85c8
feat: prompt before pushing to protected branches

bertini36
and
claude
committed
5c08a5f
feat: extend auto mode classifier with credential and git rules

bertini36
and
claude
committed
36591f7
chore: set default model to opus

bertini36
and
claude
committed
bb5bc6e
fix: guard the push hook against running without stdin

bertini36
and
claude
committed
3913368
fix: resolve the real push target instead of matching the command text

bertini36
and
claude
committed
4ffe204