#ai-under-lock

Don't Ask the Model Not to Read .env. Securing Your Daily Work with Claude Code

Deny rules, hooks and an OS sandbox: how to keep Claude Code away from your secrets, iCloud and Docker, even when you run it in auto mode.