Prove it works
Configuration you haven’t tested may not do what you think, so verify it three ways:
- Test it live: in a throwaway project with a fake
.env, ask Claude to read, print, edit and delete things it shouldn’t. The ten-minute self-test lists each request and what should block it. - Audit the configuration: the audit container checks your settings, hooks and repositories in about a minute.
- Re-check after upgrades: the checklist covers this post on one page.