Put hard "never" rules in deny rules or hooks.
Auto mode and spoken boundaries are judgment; deny rules and hooks are enforcement.
Permissions
The habits that make the difference. Tick the ones you already keep and see what is left.
0 / 3 you keep
Run bypassPermissions only in disposable containers.
It removes the safety net, so make the environment the net.
For unattended scripts, use dontAsk with an explicit --allowedTools list.
The script can do exactly what you listed and nothing else.