writing-deny-allow-rules

What problem does it solve?

It turns ad hoc permission decisions into reviewable rule files so Claude Code can consistently allow, deny, or ask before important actions.

Core Features & Use Cases

• One-rule-per-file policy authoring for user, project, or plugin scope.
• Precise matchers for Bash commands and path-based write controls, including force-push blocking and sensitive directory protection.
• Clear precedence guidance so narrower rules override broader ones when multiple files apply.
• A built-in rationale pattern for audits, code review, and future maintainers.
• Use it to separate declarative policy from runtime hooks and to document why a rule exists.

Quick Start

Ask Claude to help you write a reviewable rule file for the action you want to allow, deny, or prompt on, and specify the scope, tool, matcher, severity, and rationale in plain language.