Locking Down Claude Code: Permissions, Sandbox, Hooks, and Enterprise Controls

A defense-in-depth playbook for Claude Code — from .claudeignore to OS-level sandbox, with real-world scenarios and …