Claude Opus 5andbdeshi
2466ce79c7
The coupling gate treated every path under .claude/ as mechanism, so editing the pre-approved command list demanded an explanation of a machine that had not changed. HARNESS.md already calls settings.json a convenience — if its schema changed the harness would still work, you would just get more prompts — so the gate now exempts that one file and nothing else. Carries the settings.json edit that exposed it.
39 lines
852 B
JSON
39 lines
852 B
JSON
{
|
|
"permissions": {
|
|
"defaultMode": "default",
|
|
"allow": [
|
|
"Bash(gofmt:*)",
|
|
"Bash(go build:*)",
|
|
"Bash(go vet:*)",
|
|
"Bash(go test:*)",
|
|
"Bash(go run:*)",
|
|
"Bash(go doc:*)",
|
|
"Bash(go list:*)",
|
|
"Bash(go mod tidy)",
|
|
"Bash(go mod why:*)",
|
|
"Bash(./scripts/verify.sh)",
|
|
"Bash(bash scripts/verify.sh)",
|
|
"Bash(git rev-parse:*)",
|
|
"Bash(git status:*)",
|
|
"Bash(git status)",
|
|
"Bash(git diff:*)",
|
|
"Bash(git log:*)",
|
|
"Bash(git show:*)",
|
|
"Bash(git add:*)",
|
|
"Bash(git commit:*)",
|
|
"Bash(rg:*)",
|
|
"Bash(wc:*)",
|
|
"Bash(curl -s http://localhost:*)",
|
|
"Bash(curl -s http://127.0.0.1:*)"
|
|
],
|
|
"ask": [
|
|
"Bash(go get:*)"
|
|
],
|
|
"deny": [
|
|
"Bash(git push:*)",
|
|
"Bash(rm -rf:*)",
|
|
"Read(./.envrc)"
|
|
]
|
|
}
|
|
}
|