Three Claude Code permission presets and the gap none of them closes

The article presents three permission presets for Claude Code's settings.json, ranging from strict to fully autonomous, to reduce repeated approval prompts. Rules are evaluated with deny taking precedence over ask, and ask over allow, with unlisted commands falling back to the defaultMode. The author notes that the autonomous preset's Bash(git:*) rule also permits destructive commands like git push --force and git reset --hard, since permission rules match only by command prefix. A second gap is that file-read restrictions apply to Claude's Read tool but not to shell commands such as cat .env, which requires PreToolUse hooks to inspect and block. The author links free open-source hooks for blocking destructive commands and secret writes, and promotes a paid Spanish-language kit bundling the presets, hooks, skills, and templates.