{
  "_comment": "Claude Code settings for the PLANNING run. The planner literally has no hands: every mutating tool is denied, so a hijacked plan still can't touch a file. Pass with: claude --settings ops/planner.settings.json",
  "permissions": {
    "allow": [
      "Read",
      "Grep",
      "Glob",
      "Bash(git log:*)",
      "Bash(git diff:*)",
      "Bash(make test:*)"
    ],
    "deny": [
      "Edit",
      "Write",
      "NotebookEdit",
      "Bash(git commit:*)",
      "Bash(git push:*)",
      "Bash(rm:*)"
    ]
  }
}