Shell Command Safety

Claude Code hands a hook's exit code 2 back to the model as a refusal reason

Allow and deny globs in settings.json cannot separate git status from git push --force, so the real enforcement moves into a PreToolUse hook that reads the command text, exits 2, and tells the model why it was refused.