Boris Cherny5/ Pre-approve Common Permissions
Source snapshot: 2026-11-09Independent editorial note
When this pattern helps
Apply the least privilege needed for the task. Separate read-only inspection from mutation, keep destructive actions behind explicit approval, and inspect the effective permissions rather than relying on a setting name alone.
权限只给完成任务所必需的范围。把只读检查与写入操作分开，破坏性动作必须显式确认，并检查最终生效的权限，而不只看设置名称。
Claude Code uses a permission system combining prompt injection detection, static analysis, sandboxing, and human oversight.
Out of the box, a small set of safe commands are pre-approved. To pre-approve more, run /permissions and add to the allow and block lists. Check these into your team's settings.json.
Full wildcard syntax is supported — e.g., Bash(bun run *) or Edit(/docs/**).
Original source on X