Git commits
What it records
-
commitpoint — an instanta git commit the user authored; data.message, data.branch, data.repo (project name), data.repo_path (absolute path — maps to a Claude prompt's data.cwd).
What it can touch
The declared manifest — the sheet shown before install. Asking for more later means re-consent.
- Reads files
~enforced — a sandbox wall, whatever the code tries
- Runs commands
full exec — first-party onlyexec — the sudo tier — first-party only