Chapter 12: Permissions and Security
Claude Code executes code in the user's real environment — security is not an optional add-on, but a cornerstone of the architecture.
本篇目录
- 12.1 Defense in Depth Architecture
- 12.2 Permission Modes
- 12.3 Permission Rule System
- 12.4 Complete Permission Decision Flow
- 12.5 Three Permission Handlers
- 12.6 Multi-layer Security Verification for Bash Commands
- 12.7 Dangerous File and Directory Protection
- 12.8 Permission Decision Tracking
- 12.9 Sandbox Design
- 12.10 Path Boundary Protection
- 12.11 Prompt Injection Defense
- 12.12 Environment Variable Security
- 12.13 Denial Tracking and Degradation
- 12.14 PermissionRequest Hook
- 12.15 Security Design Principles Summary