The Claude Code Safety Field Manual

The Claude Code Safety Field Manual

yurukusa
Buy on Leanpub

Table of Contents

The Claude Code Safety Field Manual

  • What this manual checks, and what it does not (Preface)
    • How it is arranged
    • Who this is for
  • A pre-flight checklist for leaving Claude Code running unattended (Chapter 1)
    • Before your first session
    • Before letting it run unattended
    • During the session
    • After the session
    • For a team
  • How to audit your Claude Code setup before installing anything (Chapter 2)
  • Which of the default hooks can actually block a command (Chapter 3)
    • What this list does not cover
  • How to prove your Claude Code hooks actually fire (Chapter 4)
  • Why npx cc-safe-setup installed an outdated version for five months, and how to check what you have (Chapter 5)
  • What to check after a Claude Code session ends (Chapter 6)
  • Which hook event can stop a tool call, and which only watches (Chapter 7)
    • What the repository actually uses
    • What each event can and cannot do
    • When the thing you are afraid of never reaches an event
    • The practical rule
  • How to tell whether your hooks can actually refuse anything (Chapter 8)
    • The count
    • Having a refusal is necessary, not sufficient
    • The third question, which I nearly answered wrong
    • The seventh file
    • The name is not the answer
    • What that leaves you with
    • How to check yours, in one command
    • The rule
  • What happens when a Claude Code hook is broken or not working (Chapter 9)
    • The contract, and where it applies
    • What actually comes out
    • The first table assumes your hook has a shebang
    • The one that will actually get you
    • The defensive line that changes the answer
    • Check yours
  • A catalogue of every hook in cc-safe-setup: which event each runs on, and whether it can refuse (Chapter 10)
    • Safety Guards
    • Auto-Approve
    • Quality
    • Agent Controls
    • Monitoring
    • Recovery
    • UX
    • Other
    • Uncategorised
  • What —dangerously-skip-permissions actually skips, and what still stops you (Chapter 11)
    • The short answer
    • How I checked
    • The other layer: permissions.deny
    • The interactive observation, and what it is worth
    • What this does not prove
    • Check yours in about a minute
    • The part that should still worry you
    • There is now a flag that refuses the mode outright — and I missed it
  • Which GitHub issue each hook answers (Appendix A)
  • Afterword
    • How this book was made
The Claude Code Safety Field Manual/Overview

The Claude Code Safety Field Manual

Course overview

Free field manual for running Claude Code safely: the pre-flight checklist, which hook event can refuse a tool call, how to prove a guard fires, what --dangerously-skip-permissions really skips, and a catalogue of all 916 example hooks.

14 chapters
Begin reading
Download
The Book

The Claude Code Safety Field Manual14 chapters

Begin ›
  1. What this manual checks, and what it does not (Preface)

  2. A pre-flight checklist for leaving Claude Code running unattended (Chapter 1)

  3. How to audit your Claude Code setup before installing anything (Chapter 2)

  4. Which of the default hooks can actually block a command (Chapter 3)

  5. How to prove your Claude Code hooks actually fire (Chapter 4)

  6. Why npx cc-safe-setup installed an outdated version for five months, and how to check what you have (Chapter 5)

  7. What to check after a Claude Code session ends (Chapter 6)

  8. Which hook event can stop a tool call, and which only watches (Chapter 7)

  9. How to tell whether your hooks can actually refuse anything (Chapter 8)

  10. What happens when a Claude Code hook is broken or not working (Chapter 9)

  11. A catalogue of every hook in cc-safe-setup: which event each runs on, and whether it can refuse (Chapter 10)

  12. What —dangerously-skip-permissions actually skips, and what still stops you (Chapter 11)

  13. Which GitHub issue each hook answers (Appendix A)

  14. Afterword