From Dev.to
Claude Code Deny Rules Block Read(.env) But Not cat .env
I watched my production database password scroll past in a Claude Code transcript. I had a deny rule for .env. I had copied it straight from the docs. Claude never touched the Read tool. It ran grep -...