diff --git a/.claude/settings.json b/.claude/settings.json
index f079beb..3154583 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -1,41 +1,9 @@
 {
   "permissions": {
-    "allow": ["Bash(*)"],
-    "deny": [
-      "Bash(sudo *)",
-      "Bash(su *)",
-      "Bash(rm -rf /)",
-      "Bash(rm -rf /*)",
-      "Bash(rm -rf ~*)",
-      "Bash(rm -rf $HOME*)",
-      "Bash(rm -fr /*)",
-      "Bash(rm -rf --no-preserve-root*)",
-      "Bash(dd *)",
-      "Bash(mkfs*)",
-      "Bash(fdisk *)",
-      "Bash(parted *)",
-      "Bash(shutdown*)",
-      "Bash(reboot*)",
-      "Bash(halt*)",
-      "Bash(poweroff*)",
-      "Bash(systemctl stop *)",
-      "Bash(systemctl disable *)",
-      "Bash(chmod -R 777 /*)",
-      "Bash(chown -R * /)",
-      "Bash(git push --force*)",
-      "Bash(git push -f *)",
-      "Bash(git reset --hard origin/*)",
-      "Bash(git clean -fdx*)",
-      "Bash(docker system prune*)",
-      "Bash(docker volume prune*)",
-      "Bash(docker volume rm *)",
-      "Bash(docker rm -f *)",
-      "Bash(docker rmi -f *)",
-      "Bash(dropdb *)",
-      "Bash(psql * -c DROP*)",
-      "Bash(mysql * -e DROP*)",
-      "Bash(npm publish*)",
-      "Bash(cargo publish*)"
+    "allow": [
+      "Bash(cargo check *)",
+      "Bash(cargo clippy *)",
+      "Bash(git --no-pager diff *)"
     ]
   }
 }