Deny rules can't express an allow-list. A PreToolUse hook can — here's the working code, the protocol it speaks, and the writes it will never see.
How to stop a Claude Code agent writing outside a directory
Related
Why Pasting Figma Screenshots into Claude Fails (And What to Use Instead)
Here's the workflow that's become default in every design-to-code team right now: export a frame from...
How Claude's rate limits actually work — and how I track them in real time
I was two hours into a debugging session with Claude when it just stopped. No warning. No countdown....
How to stop a Claude Code agent writing outside a directory
Deny rules can't express an allow-list. A PreToolUse hook can — here's the working code, the protocol it speaks, and the writes it will never see.