Restrict Claude Code tools with glob deny rules — '*' denies all tools as a default-deny baseline

Releasebot·low signal

Recent Claude Code releases added glob pattern support in the deny-rule tool-name position, so a '*' deny rule blocks all tools, letting you build a default-deny posture and selectively allow back only what a task needs. Allow rules reject non-MCP globs, and unknown tool names in deny rules now warn at startup — a small but practical hardening for least-privilege agent configs.