My claude -p Call Has a --safe-mode Flag for Isolation. It Never Isolated the Two API Keys Sitting Right Next To It.
Four days ago I fixed a real problem in this repo: a bare claude -p invocation from git_commit.py was loading this project's own CLAUDE.md into a one-shot commit-message completion that had no use for it — including a "MANDATORY routing rules" block instructing the model to call MCP tools that don't exist in this environment. The fix was --safe-mode , a flag that drops…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
