diff --git a/.claude/settings.json b/.claude/settings.json
index 83b43b2..20edfd7 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -11,7 +11,56 @@
     ],
     "deny": [
       "Bash(git push --force:*)",
-      "Read(./.env)"
+      "Read(./.env)",
+      "Read(~/.ssh/**)",
+      "Read(~/.aws/**)",
+      "Read(~/.gnupg/**)",
+      "Edit(.claude/settings.json)",
+      "Edit(.claude/settings.local.json)"
+    ],
+    "blockReadsOutsideWorkingDirectories": true,
+    "ask": [
+      "Bash(git push:*)",
+      "Bash(git fetch:*)",
+      "Bash(git pull:*)"
+    ]
+  },
+  "sandbox": {
+    "enabled": true,
+    "autoAllowBashIfSandboxed": true,
+    "allowUnsandboxedCommands": false,
+    "filesystem": {
+      "denyRead": [
+        "~/.ssh",
+        "~/.aws",
+        "~/.gnupg",
+        "~/.config",
+        "~/.docker",
+        "~/.kube",
+        "~/.netrc",
+        "~/Library/Keychains",
+        "~/Documents",
+        "~/Desktop",
+        "~/Downloads"
+      ],
+      "denyWrite": [
+        ".claude/settings.json",
+        ".claude/settings.local.json"
+      ],
+      "allowRead": [
+        "~/.config/git"
+      ]
+    },
+    "network": {
+      "allowedDomains": [
+        "registry.npmjs.org"
+      ]
+    },
+    "excludedCommands": [
+      "git push:*",
+      "git fetch:*",
+      "git pull:*",
+      "git commit:*"
     ]
   },
   "hooks": {