From 00c668b59504e590c8b596c006ce63281e0e5612 Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Tue, 12 May 2026 22:18:54 +0200
Subject: [PATCH] chore(claude): expand permissions and require sandbox

- Adds `Bash(*)` to the allow list so routine shell commands run without
  prompting.
- Sets `sandbox.failIfUnavailable=true` so Claude Code aborts rather
  than silently running unsandboxed when the sandbox cannot initialize.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .claude/settings.json | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.claude/settings.json b/.claude/settings.json
index 2a422b0..fc369e1 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -1,5 +1,8 @@
 {
   "permissions": {
+    "allow": [
+      "Bash(*)"
+    ],
     "ask": [
       "Skill(update-config)",
       "Skill(update-config:*)"
@@ -7,6 +10,7 @@
   },
   "sandbox": {
     "enabled": true,
+    "failIfUnavailable": true,
     "autoAllowBashIfSandboxed": true
   }
 }