Safe flow state for Claude Code. Auto-approves routine actions, activates when the agent is about to:
write files, run shell commands, send messages, access credentials, make API calls,
install packages, modify config, or perform any irreversible operation.
Also activates when user invokes /guardrails, or when token cap is exceeded.
2026-04-01