Audit .claude/settings.local.json: confirm clean, no rewrite needed #128

New issue

Closed

opened 2026-05-26 05:04:19 +00:00 by coilysiren · 1 comment

coilysiren commented

2026-05-26 05:04:19 +00:00

Owner

Symptom

As part of the catalog-wide settings.local.json prune sweep, infrastructure was audited and found already clean: 5 entries, all repeating-pattern allows with no embedded paths, API keys, or one-shot shell pipelines.

Current entries:

Bash(gh run:*)
Bash(gh api:*)
Bash(git add:*)
Bash(git commit -m :*)
Bash(git push:*)

Disposition

No rewrite. Filed for audit-trail symmetry with the seven sibling prune issues across backend, eco-mods-public, gauntlet, website, luca, galaxy-gen, eco-mods. Closes immediately.

Out of scope

Per-repo settings.json deny block prune (53 identical entries duplicating coily lockdown). Separate sweep, needs coily template change.
Generic git add/commit/push + gh run/api recurring across every coilysiren repo's local file should promote to the canonical lockdown template instead of being re-listed per repo. Separate issue.

## Symptom As part of the catalog-wide settings.local.json prune sweep, infrastructure was audited and found already clean: 5 entries, all repeating-pattern allows with no embedded paths, API keys, or one-shot shell pipelines. Current entries: - `Bash(gh run:*)` - `Bash(gh api:*)` - `Bash(git add:*)` - `Bash(git commit -m :*)` - `Bash(git push:*)` ## Disposition No rewrite. Filed for audit-trail symmetry with the seven sibling prune issues across `backend`, `eco-mods-public`, `gauntlet`, `website`, `luca`, `galaxy-gen`, `eco-mods`. Closes immediately. ## Out of scope - Per-repo `settings.json` `deny` block prune (53 identical entries duplicating coily lockdown). Separate sweep, needs coily template change. - Generic `git add/commit/push` + `gh run/api` recurring across every coilysiren repo's local file should promote to the canonical lockdown template instead of being re-listed per repo. Separate issue.

coilysiren commented

2026-05-26 05:10:58 +00:00

Author

Owner

Audit confirmed clean. 5 entries, all clean repeating-pattern allows (gh run/api, git add/commit/push). No rewrite needed. Filed for audit-trail symmetry with the seven sibling prune issues. Closing immediately.

coilysiren closed this issue

2026-05-26 05:10:59 +00:00