AI permissions: start small

How to define the area an AI agent can touch before Claude Code or Codex starts working.

Keep the working directory inside the project you intend to change.

Deny reads to .env files, secret folders, private keys, and personal data.

Require a human gate for deletion, publishing, sending, purchasing, or permission changes.

Run the five-question safety check before you delegate.