diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..6965f2f
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,20 @@
+{
+  "permissions": {
+    "defaultMode": "dontAsk",
+    "deny": [
+      "Bash(git push)",
+      "Bash(git push:*)",
+      "Bash(git commit)",
+      "Bash(git commit:*)",
+      "Bash(git -C * push)",
+      "Bash(git -C * push:*)",
+      "Bash(git -C * commit)",
+      "Bash(git -C * commit:*)"
+    ]
+  },
+  "sandbox": {
+    "enabled": true,
+    "autoAllowBashIfSandboxed": true,
+    "allowUnsandboxedCommands": false
+  }
+}