BDR-004 documents the decision to adopt auto permission mode as default with classifier safety net, alternatives, and feature-gate caveats. LRN-003 captures the gotcha that Claude Code's disable* settings use the literal sentinel string "disable" rather than a boolean — required context for any future permission-mode change. Journal entry added for 2026-04-27. Co-Authored-By: Claude <noreply@anthropic.com>
5.4 KiB
5.4 KiB
| type | entry_prefix | schema | rules | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| decisions_registry | BDR |
|
|
Decisions registry (BDR)
Index
| ID | Date | Title | Status |
|---|---|---|---|
| BDR-001 | 2026-04-22 | Uniform --help helper via session-start hook (option C) | accepted |
| BDR-002 | 2026-04-23 | Move tasks/ + introduce memory + audits under .claude/ | accepted |
| BDR-003 | 2026-04-23 | Gitignore wildcard + negations pattern for .claude/ | accepted |
| BDR-004 | 2026-04-27 | Adopt auto permission mode as default | accepted |
BDR-001 — Uniform --help helper via session-start hook (option C)
- Date: 2026-04-22
- Status: accepted
- Decision: every skill exposes
--helpvia a shared snippet injected by the session-start hook, rather than duplicating the helper in each SKILL.md. - Why: 25+ skills — keeping the same helper synced across every file guarantees drift. A single injection point = single source of truth.
- Alternatives rejected:
- Option A (copy the helper into each SKILL.md) — rejected: maintenance entropy.
- Option B (external wrapper
/help <skill>) — rejected: breaks the "one command = one skill" experience.
- Reference: commit
3968a29.
BDR-002 — Move tasks/ + introduce memory + audits under .claude/
- Date: 2026-04-23
- Status: accepted
- Decision: migrate
./tasks/to.claude/tasks/, create.claude/memory/(5 registries BDR/LRN/BLK/journal/EVAL) and.claude/audits/for AUDIT_* files. Adapt skills/agents/CLAUDE.md. Integrate a CAPITALIZE step into completion skills (ship-feature, feat, bugfix, hotfix, commit-change) and add a/closeskill for the session-end ritual. - Why: grouping all meta-project state (AI config + tasks + memory + audits) under
.claude/isolates Claude governance from real code. Aligned with the official Claude Code memory docs. Without integration in completion skills, the registries would stay empty (aspirational text). - Alternatives rejected:
- Keep
./tasks/at root — rejected: clutters the repo, mixes code signal with governance signal. - Use
.claude/agent-memory/for everything — rejected:agent-memory/has a distinct role (already used by other tools). - Ritual as aspirational text only in CLAUDE.md — rejected: zero execution guarantee, registries would stay empty.
Stophook to ask the 3 questions every turn — rejected: too noisy.
- Keep
BDR-003 — Gitignore wildcard + negations pattern for .claude/
- Date: 2026-04-23
- Status: accepted
- Decision: use
.claude/*(wildcard match of immediate children) + negations!.claude/tasks/,!.claude/memory/, etc., rather than.claude/(recursive ignore). - Why: when a parent is ignored via
.claude/, git does not descend into it (performance optimization) and negations on children are ignored — documented ingitignore(5). With.claude/*, git matches each child individually, making negations active. - Alternatives rejected:
.claude/+!.claude/tasks/(naive) — rejected: negations have no effect, everything stays ignored.- Drop
.claude/from gitignore entirely — rejected:.claude/settings.local.jsonand.claude/agent-memory/must stay ignored (per-machine). - Track paths via
.gitattributesor an external tool — rejected: over-engineering, git handles this natively.
- Reference: commit
499cd07,git check-ignore -vverified on 4 paths (2 tracked, 2 ignored).
BDR-004 — Adopt auto permission mode as default
- Date: 2026-04-27
- Status: accepted
- Decision: set
permissions.defaultModeto"auto"in user-scopesettings.jsonand dropdisableAutoMode: "disable". Auto mode runs a classifier on every action and blocks risky operations (curl|bash, prod deploys, force push, IAM grants, mass deletes, exfiltration to external endpoints) while auto-approving local edits, lockfile-declared dep installs, and read-only HTTP. - Why: prompt fatigue under
defaultmode is significant on multi-step autonomous work. Auto mode keeps a safety net (classifier review) without the per-tool friction. The classifier also re-evaluates conversation-stated boundaries ("don't push", "wait for review") on every check, so verbal constraints carry weight. - Alternatives rejected:
- Keep
default— too many prompts, breaks flow on long tasks. acceptEdits— eliminates prompts but no classifier, blanket trust on Bash beyond filesystem helpers.bypassPermissions— skips all checks, no prompt-injection guard. Only for isolated containers.dontAsk— full denylist, breaks anything not pre-approved. Suited to CI, not interactive work.
- Keep
- Caveats: requires Claude Code v2.1.83+, plan ≠ Pro (Max/Team/Enterprise/API only), Sonnet 4.6 / Opus 4.6 / Opus 4.7, Anthropic API provider. On entering auto mode, blanket allow rules (
Bash(*),Bash(python*), package-manager run,Agent) are dropped and restored on exit. - Reference: commit
1421578.