Day 62 / 100 · Guardrails & security

Allow the boring. Deny the dangerous.

Day 26 was answering prompts one at a time. Now set standing rules in your project settings, so safe things flow and risky things can't happen.

Permission Modes

Manual (default)

Asks before edits and commands

Accept edits

Edits files freely, asks for commands

Plan

Reads and proposes, changes nothing

Bypass

Asks nothing. Never on your real machine.

Standing Rules

// .claude/settings.json
"permissions": {
  "allow": [
    "Bash(npm run test:*)" ],
  "deny": [
    "Read(./.env)",
    "Bash(git push:*)" ]
}

Allow the boring. Deny the dangerous. Ask about the rest.