renormalize .claude/ via coily lockdown --apply --replace #16

New issue

Closed

opened 2026-06-08 05:45:38 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-06-08 05:45:38 +00:00

Owner

The ansible freshen pass across the coilyco orgs re-rendered the coily-managed lockdown artifacts (.claude/settings.json, and where present .claude/lockdown-deny.sh) to the current coily lockdown output. The render slims the per-repo deny list now that the shared cli-guard engine handles those denials centrally, collapses the git allow patterns into Bash(git:*), and normalizes the lockdown-deny header.

This issue tracks committing that mechanical convergence so the working tree matches the managed render.

The `ansible freshen` pass across the coilyco orgs re-rendered the coily-managed lockdown artifacts (`.claude/settings.json`, and where present `.claude/lockdown-deny.sh`) to the current `coily lockdown` output. The render slims the per-repo deny list now that the shared cli-guard engine handles those denials centrally, collapses the `git` allow patterns into `Bash(git:*)`, and normalizes the lockdown-deny header. This issue tracks committing that mechanical convergence so the working tree matches the managed render.

coilysiren referenced this issue from a commit

2026-06-08 05:48:02 +00:00

chore: renormalize .claude/ to current coily lockdown render

coilysiren closed this issue

2026-06-08 05:48:02 +00:00