Kevin Veen-Birkenbach 28a796e24f chore(claude): enable sandbox and consolidate bash allowlist ...

Activate the harness sandbox (enabled + autoAllowBashIfSandboxed +
filesystem write/deny rules) and replace the ~30 specific Bash(...)
permission entries with a single Bash(*) wildcard. The existing deny
list (git push --force, git reset --hard, rm -rf, sudo) and ask list
(git push, docker run, curl) keep their precedence.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-11 02:36:28 +02:00

..

.gitignore

chore(claude): expand harness allowlist and ignore local state

2026-05-11 02:15:04 +02:00

settings.json

chore(claude): enable sandbox and consolidate bash allowlist

2026-05-11 02:36:28 +02:00