- Removed Bash(git reset --hard*) and Bash(git clean -fd*) from deny list. - git reset --hard and git clean -fd are not in allow either, so Claude will prompt for confirmation each time (safest middle ground). - git clean -fdx remains denied (removes ignored files = dangerous). - Updated CLAUDE.md permission summary to reflect new model.