I denied .env file reads in my settings.json. Claude Code read them anyway. Here is how to build permissions that actually hold.

Claude Code ships with a tiered permission system that most developers never configure beyond clicking "Yes, don't ask again." That default workflow creates invisible gaps. Every auto-approved command persists...