Guards

Stops Claude from reading or editing .env files, private keys and credential files, including through symlinks and shell commands

Keeps a running list of every file Claude edited or wrote this session: a count in the status line and a /touched pane