$ cat /var/log/thoughts

AI Coding + Security

Posts matching all selected tags.

Filters2

21 posts

Bash allow wildcards match options before subcommands

Bash allow wildcards match options before subcommands. Put the star after git log or git commit. A deny on git push does not close the documented -c hole.

Strong OpinionsClaude CodeAI CodingSecurityDeveloper ToolsCLIGit1 min read · Aug 25, 2026

Claude channels from Telegram without granting root

Claude Code channels let Telegram hit a live local session. Launch it in Manual mode, skip-permissions stays off, and deny the git push on the laptop.

Build AlongClaude CodeAI CodingDeveloper ToolsMCPSecurityCLI1 min read · Aug 25, 2026

A Claude Code dev container is the sandbox you skipped

A claude code dev container puts the CLI in Docker so bash cannot see the host home. Persist login with CLAUDE_CONFIG_DIR, then rebuild and prove isolation.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIDockerVS CodeSecurity1 min read · Aug 25, 2026

Claude Cowork vs OpenClaw is a permission model fight

claude cowork vs openclaw is a permission default. Cowork stays in a folder and still asks to delete. OpenClaw ships host exec with ask off. Pick the disk.

Strong OpinionsClaude DesktopSecurityAI CodingOpen SourceSelf-HostingDeveloper ToolsClaude Code1 min read · Aug 25, 2026

Cloudflare Virtual Wallets are the subaccount for APIs

Cloudflare Virtual Wallets are the API-key subaccount. Claim the handle this week, pick three spending caps, and never hand the Account Wallet to an agent.

Deep DivesCloudflareSecurityDeveloper ToolsAI CodingArchitectureTrend Commentary1 min read · Aug 25, 2026

Keep auto mode on and still make git push ask

Auto mode git push still prompts if you add an ask rule. Keep auto mode on. The new Auto mode tab is the classifier notebook. Ask is the real checkpoint.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIGitSecurity1 min read · Aug 25, 2026

OpenClaw vs Claude is not a coding agent bakeoff

OpenClaw vs Claude is a category error. One is a session with a permission dialog. The other is a host Gateway with ask off. Read the docs before you pick.

Strong OpinionsAI CodingClaude CodeSecurityOpen SourceCoding AgentsSelf-HostingDeveloper Tools1 min read · Aug 25, 2026

VS Code assisted approvals let the model skip the prompt

Turn on VS Code assisted approvals so Copilot skips low-risk tool prompts on long tasks. Pin Copilot on the agent host, pick Assisted, keep a hard ask.

Build AlongVS CodeAI CodingDeveloper ToolsSecurityProductivity1 min read · Aug 25, 2026

Write settings.json without granting git star main

Write Claude Code settings that allow git commit and git log without a star before the subcommand. Restart with no 2.1.246 warning, and git push still asks.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIGitSecurity1 min read · Aug 25, 2026