#deny

The deny rules that stop Claude Code force-pushing, how to cover -f and --force-with-lease and reordered options, and why a deny rule is a safety net

A Read deny rule is the reliable way to keep .env out of the model's input. How to write the pattern, how depth and anchoring change its reach, and wh