Show HN: A police department for your Claude Code agents

Re:Show HN: A police department for your Claude Code agents by tomaytotomato on Thursday June 11, 2026 @03:17PM (#48495111)

Not a criticism, but why would I use this instead of locking down my Claude using the allow/deny permissions list?

    "permissions": {
    "allow": [
      "Bash(npm run lint)",
      "Bash(npm run test *)",
      "Read(~/.zshrc)"
    ],
    "deny": [
      "Bash(curl *)",
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./secrets/**)"
    ]
  },

[ Parent | on HN ]

Re:Show HN: A police department for your Claude Code agents by FishAngular12 on Thursday June 11, 2026 @03:28PM (#48495252)

Where would one put this? In AGENTS.md?

[ Parent | on HN ]

Re:Show HN: A police department for your Claude Code agents by abirch on Thursday June 11, 2026 @03:36PM (#48495363)

Your settings file: User settings are defined in ~/.claude/settings.json

or /permissions

https://code.claude.com/docs/en/permissions

[ Parent | on HN ]

Re:Show HN: A police department for your Claude Code agents by softie123 on Thursday June 11, 2026 @05:17PM (#48496544)

Idea is not to deny permissions to everything but just keep a log on what the agents are doing thats not in line with our permissions and also you have to know what they are bypassing so we can put them in deny list later. Very useful when you spawn many agents working in parallel. This is more of an observability tool.

[ Parent | on HN ]

Re:Show HN: A police department for your Claude Code agents by tenuousemphasis on Thursday June 11, 2026 @06:37PM (#48497361)

Well at least you'll know why your data was exfiltrated or your systems compromised, even if you can't stop it...

[ Parent | on HN ]

Re:Show HN: A police department for your Claude Code agents by softie123 on Thursday June 11, 2026 @09:34PM (#48498754)

thats exactly what i went for. also I am keeping all the logs compressed so may be i can build something to build later

[ Parent | on HN ]