Add --bare in CI and scripts.
Every machine then behaves the same, regardless of what hooks or plugins live on it.
The habits that make the difference. Tick the ones you already keep and see what is left.
--bare in CI and scripts.Every machine then behaves the same, regardless of what hooks or plugins live on it.
What is done, can it check itself, what may it touch, what stops it (--max-turns, --max-budget-usd), and who signs off.
main with a branch rule before leaving cloud tasks running.A scheduled task cannot bypass a branch rule, so a bad run cannot land on main.
claude -p instead of letting it fetch.Claude then needs no Bash permission to read it.
git diff main | claude -p "review this"