I will say one thing Claude does is it doesn't run a command until you approve it, and you can choose between a one-time approval and always allowing a command'

I will say one thing Claude does is it doesn't run a command until you approve it, and you can choose between a one-time approval and always allowing a command's pattern. I usually approve the simple commands like `zig build test`, since I'm not particularly worried about the test harness. I believe it also scopes file reading by default to the current directory.