Enable the Bash sandbox with writes limited to the project, block reads of credential and personal folders, and protect the settings files from edits. git commit/push/fetch/pull run unsandboxed so GPG and SSH work; network git commands always ask first. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>