Add agentic-ai/Claude/ — bypassPermissions + PreToolUse safety hooks - #17

Merged

ulises-c merged 23 commits into

mainfrom

claude/thirsty-mclean-2872e4

May 23, 2026

Commits on May 20, 2026

Add agentic-ai/Claude/ config with bypassPermissions and safety hooks

ulises-c
and
claude
committed
7ea51f9
Implement Tips 4-8: PostToolUse shellcheck, Stop driftcheck, rules hierarchy, agent triggers + gap fix

ulises-c
and
claude
committed
3f04562
Add OS-level sandboxing via bubblewrap

ulises-c
and
claude
committed
c9781ca
Fix hook exec bits, tighten settings, allow GPG signing
ulises-c
committed
1b7d393

Commits on May 21, 2026

Allow gh CLI writes and fix GPG signing in sandbox
ulises-c
committed
549acff
Fix PR #17 review issues: set -euo pipefail, cat|jq, README drift, PLAN.md
ulises-c
committed
3e6b96f
docs(PLAN.md): add denyWrite/nested sandbox items, references section
ulises-c
committed
144445a
docs(PLAN.md): switch credential example from 1Password to Bitwarden
ulises-c
committed
b9d63f7
docs: disable sandbox, remove Bitwarden, document path back

ulises-c
and
claude
committed
151ccad
docs(SANDBOX.md): document sandbox blockers, workarounds, and re-enable path

ulises-c
and
claude
committed
d5ef5c2
fix(validate-bash): block shell redirects to sensitive credential and system paths

ulises-c
and
claude
committed
b1460e5
feat: denyWrite prep, GH_TOKEN in install.sh, PLAN.md cleanup

ulises-c
and
claude
committed
b14e4a6

Commits on May 22, 2026

refactor(install): remove GH_TOKEN prompt, always symlink settings.json

ulises-c
and
claude
committed
b0fdd33
docs(PLAN): complete railguard paper evaluation; fix install.sh symlink loop

ulises-c
and
claude
committed
b33b8df
feat(railguard): integrate railguard v0.5.1 hook layer

ulises-c
and
claude
committed
d5d7249
docs(PLAN): document validate-bash.sh heredoc false-positive issue
ulises-c
committed
9a602d2
chore(settings): reorder sandbox filesystem keys to allowWrite/denyWrite/denyRead

ulises-c
and
claude
committed
d06e2fd
fix(validate-bash): scope policy checks to first line; remove railguard duplicates

ulises-c
and
claude
committed
b1d50b3
docs(PLAN): record session handoff — heredoc fix, railguard observed behaviors

ulises-c
and
claude
committed
f60bede
feat(validate-bash): block piped interpreter exec and inline interpreter patterns

ulises-c
and
claude
committed
2d581ea
feat(hooks): add post-test-runner PostToolUse hook

ulises-c
and
claude
committed
2bdd8ef
fix(hooks): add execute permission to post-test-runner.sh

ulises-c
and
claude
committed
abb9ce6

Commits on May 23, 2026

docs(PLAN): clean up completed items, drop GH_TOKEN, clarify multi-VCS rationale

ulises-c
and
claude
committed
494ffbc