ARCHETYPE
Fort Knox
Deny lists, pre-tool hooks, sandboxing. Nothing touches prod without a signature.
GUARDRAILS
4/5
Blocks destructive commands · Pre-tool screening hook · No YOLO mode · Sandbox or ask-first rules · details
Copy this rig
# review before running: this installs third-party code
$ npx degit delphinus/dotfiles/.claude ./rig-dotfiles # inspect, then merge into .claude/ MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.
{
"permissions": {
"deny": [
"mcp__chrome-devtools__click",
"mcp__chrome-devtools__close_page",
"mcp__chrome-devtools__drag",
"mcp__chrome-devtools__evaluate_script",
"mcp__chrome-devtools__fill",
"mcp__chrome-devtools__fill_form",
"mcp__chrome-devtools__handle_dialog",
"mcp__chrome-devtools__hover",
"mcp__chrome-devtools__lighthouse_audit",
"mcp__chrome-devtools__navigate_page",
"mcp__chrome-devtools__new_page",
"mcp__chrome-devtools__press_key",
"mcp__chrome-devtools__take_heapsnapshot",
"mcp__chrome-devtools__type_text",
"mcp__chrome-devtools__upload_file",
"mcp__slack-personal__slack_add_reaction",
"mcp__slack-personal__slack_create_canvas",
"mcp__slack-personal__slack_create_conversation",
"mcp__slack-personal__slack_schedule_message",
"mcp__slack-personal__slack_send_message",
"mcp__slack-personal__slack_send_message_draft",
"mcp__slack-personal__slack_update_canvas"
],
"ask": [
"mcp__atlassian__confluence_add_comment",
"mcp__atlassian__confluence_add_labels",
"mcp__atlassian__confluence_add_restriction",
"mcp__atlassian__confluence_copy_page",
"mcp__atlassian__confluence_create_page",
"mcp__atlassian__confluence_delete_comment",
"mcp__atlassian__confluence_delete_page",
"mcp__atlassian__confluence_move_page",
"mcp__atlassian__confluence_remove_label",
"mcp__atlassian__confluence_remove_restriction",
"mcp__atlassian__confluence_reply_comment",
"mcp__atlassian__confluence_update_comment",
"mcp__atlassian__confluence_update_page",
"mcp__atlassian__jira_add_comment",
"mcp__atlassian__jira_add_worklog",
"mcp__atlassian__jira_create_issue",
"mcp__atlassian__jira_delete_comment",
"mcp__atlassian__jira_delete_issue",
"mcp__atlassian__jira_epic_add_issues",
"mcp__atlassian__jira_epic_remove_issues",
"mcp__atlassian__jira_link_issues",
"mcp__atlassian__jira_remove_link",
"mcp__atlassian__jira_sprint_add_issues",
"mcp__atlassian__jira_sprint_create",
"mcp__atlassian__jira_sprint_update",
"mcp__atlassian__jira_transition_issue",
"mcp__atlassian__jira_update_comment",
"mcp__atlassian__jira_update_issue"
]
},
"hooks": {
"PreToolUse": [
{
"matcher": "Bash",
"hooks": [
{
"type": "command",
"command": "claude-code-hooks gh-guard"
}
]
},
{
"matcher": "*",
"hooks": [
{
"type": "command",
"command": "\"$HOME/Library/Application <redacted>-event-hook.sh\" Working # notchbar-agents-claude-hook"
}
]
}
]
}
} Hooks (28)
| event | matcher | runs |
|---|---|---|
| Notification | permission_prompt | claude-code-hooks tabcolor waiting |
| Notification | permission_prompt | claude-code-hooks notify 'Claude Code' 'ユーザー確認が必要です' |
| Notification | idle_prompt | claude-code-hooks tabcolor idle |
| Notification | idle_prompt | claude-code-hooks notify 'Claude Code' '待機中です' |
| Notification | * | "$HOME/Library/Application <redacted>-event-hook.sh" Waiting # notchbar-agents-claude-hook |
| PermissionRequest | * | claude-code-hooks tabcolor waiting |
| PermissionRequest | * | claude-code-hooks notify 'Claude Code' 'パーミッションが必要です' |
| PreToolUse | Bash | claude-code-hooks gh-guard |
| PreToolUse | * | "$HOME/Library/Application <redacted>-event-hook.sh" Working # notchbar-agents-claude-hook |
| PostToolUse | * | claude-code-hooks tabcolor thinking |
| PostToolUse | * | claude-code-hooks save |
| PostToolUse | * | "$HOME/Library/Application <redacted>-event-hook.sh" Auto # notchbar-agents-claude-hook |
| PostToolUseFailure | * | "$HOME/Library/Application <redacted>-event-hook.sh" ToolFail # notchbar-agents-claude-hook |
| SessionEnd | * | claude-code-hooks tabcolor default |
| SessionEnd | * | claude-code-hooks stamp --clear |
| SessionEnd | * | claude-code-hooks save |
| SessionEnd | * | claude-code-hooks notify 'Claude Code' 'セッションの保存が完了しました' |
| SessionEnd | * | "$HOME/Library/Application <redacted>-event-hook.sh" Ended # notchbar-agents-claude-hook |
| SessionStart | * | claude-code-hooks tabcolor startup |
| SessionStart | * | claude-code-hooks stamp |
| SessionStart | * | "$HOME/Library/Application <redacted>-event-hook.sh" Idle # notchbar-agents-claude-hook |
| Stop | * | claude-code-hooks tabcolor idle |
| Stop | * | claude-code-hooks notify 'Claude Code' '作業が完了しました' |
| Stop | * | claude-code-hooks save |
| Stop | * | "$HOME/Library/Application <redacted>-event-hook.sh" Idle # notchbar-agents-claude-hook |
| UserPromptSubmit | * | claude-code-hooks tabcolor thinking |
| UserPromptSubmit | * | claude-code-hooks save |
| UserPromptSubmit | * | "$HOME/Library/Application <redacted>-event-hook.sh" Working # notchbar-agents-claude-hook |
Plugins (2)
frontend-design@claude-plugins-officialswift-lsp@claude-plugins-official
Permissions
deny (22)
mcp__chrome-devtools__click
mcp__chrome-devtools__close_page
mcp__chrome-devtools__drag
mcp__chrome-devtools__evaluate_script
mcp__chrome-devtools__fill
mcp__chrome-devtools__fill_form
mcp__chrome-devtools__handle_dialog
mcp__chrome-devtools__hover
mcp__chrome-devtools__lighthouse_audit
mcp__chrome-devtools__navigate_page
mcp__chrome-devtools__new_page
mcp__chrome-devtools__press_key
mcp__chrome-devtools__take_heapsnapshot
mcp__chrome-devtools__type_text
mcp__chrome-devtools__upload_file
mcp__slack-personal__slack_add_reaction
mcp__slack-personal__slack_create_canvas
mcp__slack-personal__slack_create_conversation
mcp__slack-personal__slack_schedule_message
mcp__slack-personal__slack_send_message
mcp__slack-personal__slack_send_message_draft
mcp__slack-personal__slack_update_canvas
ask (28)
mcp__atlassian__confluence_add_comment
mcp__atlassian__confluence_add_labels
mcp__atlassian__confluence_add_restriction
mcp__atlassian__confluence_copy_page
mcp__atlassian__confluence_create_page
mcp__atlassian__confluence_delete_comment
mcp__atlassian__confluence_delete_page
mcp__atlassian__confluence_move_page
mcp__atlassian__confluence_remove_label
mcp__atlassian__confluence_remove_restriction
mcp__atlassian__confluence_reply_comment
mcp__atlassian__confluence_update_comment
mcp__atlassian__confluence_update_page
mcp__atlassian__jira_add_comment
mcp__atlassian__jira_add_worklog
mcp__atlassian__jira_create_issue
mcp__atlassian__jira_delete_comment
mcp__atlassian__jira_delete_issue
mcp__atlassian__jira_epic_add_issues
mcp__atlassian__jira_epic_remove_issues
mcp__atlassian__jira_link_issues
mcp__atlassian__jira_remove_link
mcp__atlassian__jira_sprint_add_issues
mcp__atlassian__jira_sprint_create
mcp__atlassian__jira_sprint_update
mcp__atlassian__jira_transition_issue
mcp__atlassian__jira_update_comment
mcp__atlassian__jira_update_issue
allow (65)
mcp__atlassian__confluence_child_pages
mcp__atlassian__confluence_get_page
mcp__atlassian__confluence_get_space
mcp__atlassian__confluence_list_attachments
mcp__atlassian__confluence_list_comments
mcp__atlassian__confluence_list_labels
mcp__atlassian__confluence_list_restrictions
mcp__atlassian__confluence_list_spaces
mcp__atlassian__confluence_page_history
mcp__atlassian__confluence_search
mcp__atlassian__jira_board_issues
mcp__atlassian__jira_dev_status
mcp__atlassian__jira_get_filter
mcp__atlassian__jira_get_issue
mcp__atlassian__jira_get_project
mcp__atlassian__jira_get_subtasks
mcp__atlassian__jira_list_attachments
mcp__atlassian__jira_list_boards
mcp__atlassian__jira_list_comments
mcp__atlassian__jira_list_components
mcp__atlassian__jira_list_filters
mcp__atlassian__jira_list_link_types
mcp__atlassian__jira_list_projects
mcp__atlassian__jira_list_versions
mcp__atlassian__jira_list_worklogs
mcp__atlassian__jira_myself
mcp__atlassian__jira_search
mcp__atlassian__jira_search_users
mcp__atlassian__jira_sprint_issues
mcp__atlassian__jira_sprint_list
mcp__chrome-devtools__get_console_message
mcp__chrome-devtools__list_console_messages
mcp__chrome-devtools__list_pages
mcp__chrome-devtools__select_page
mcp__chrome-devtools__take_screenshot
mcp__chrome-devtools__take_snapshot
mcp__chrome-devtools__wait_for
mcp__plugin_slack-read_slack-read__*
mcp__slack-personal__slack_get_reactions
mcp__slack-personal__slack_list_channel_members
mcp__slack-personal__slack_read_canvas
mcp__slack-personal__slack_read_channel
mcp__slack-personal__slack_read_file
mcp__slack-personal__slack_read_thread
mcp__slack-personal__slack_read_user_profile
mcp__slack-personal__slack_search_channels
mcp__slack-personal__slack_search_emojis
mcp__slack-personal__slack_search_public
mcp__slack-personal__slack_search_public_and_private
mcp__slack-personal__slack_search_users
Bash(bun ~/.claude/scripts/web-fetch.ts *)
Bash(ffprobe *)
Bash(stylua --check *)
Bash(gh search *)
Bash(launchctl print *)
Bash(launchctl list *)
Bash(ghq list *)
Bash(codesign -d *)
Bash(pmset -g *)
Bash(defaults read *)
Similar rigs
ruvnet/ruflo
🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native
Fort Knox 35.3k tok ·
Donchitos/Claude-Code-Game-Studios
Turn Claude Code into a full game dev studio — 49 AI agents, 72 workflow skills, and a complete coordination system mirroring real studio hierarchy.
Fort Knox 11.6k tok ·
FlorianBruniaux/claude-code-ultimate-guide
The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.
Fort Knox 33.8k tok ·
trailofbits/claude-code-config
Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits
Fort Knox 0 tok ·