Prevents CLAUDE.md walk-up through parent directories by passing --bare to every Claude CLI invocation, and explicitly injects the workspace CLAUDE.md via --append-system-prompt-file so agent identity is isolated. Adds fake-claude fixture and integration test to verify flags are present. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| fake-claude.cmd | ||
| fake-claude.mjs | ||