When deny doesn't win: least-privilege permissions for Claude Code
Anthropic's Claude Code lacks a way to express least-privilege permissions, allowing a poisoned issue to turn an allowed shell into an SSH-key exfiltration path, according to a blog post by Saleem Mirza introducing permc…