u/GuideAccomplished617

Hello everyone. I am seeing a lot of posts about wanting to avoid clicking permission. But I am having the opposite problem. I want to actually make Claude read-only in the Claude Code extension. I understand that it is impossible to "physically" block them from running commands unless I do it at the OS level. But I have tried using the Plan mode and the Manual/Default mode. In both cases, Claude still ran things without asking, and quite quickly with minimal prompting as well, even if it was just making some empty test files. Does anyone have a good solution for this?

Right now, I only have the permission setting in the settings.local.json file. Maybe someone knows what I should add to make it less likely to run even harmless commands?

{
  "permissions": {
    "defaultMode": "default"
  }
}