Foreman

Permissions

You decide what Claude may never grant itself

Some things only you can allow: editing Foreman, pushing, starting a server, installing plugins. Claude asks once through Claude Code's own prompt, and your yes covers exactly that.

The switches

  • Grants per task. core (Foreman's own code), publish (a push or release), remote (serving a repo), plugin (installs).
  • Trust mode. /fm-trust on lets Claude edit the guard and Claude Code's settings; only you can type it.
  • Sensitive repos. fm sensitive on keeps a repo's content from leaving the machine.
  • A daily risk budget. Destructive blocks and failed closes spend points; past the cap, autonomy steps down a notch until tomorrow.
Refusals that waited for a yesBlocks in the categories only you can grant.
corecore: 111111state-directstate-direct: 3636pluginplugin: 2626credentialscredentials: 44
Show the numbers
value
core111
state-direct36
plugin26
credentials4

Next: Audits and review