Before you install

What it can touch

Read this once. It is the whole list. Everything the setup is allowed to do is on this page, in the order it matters, and nothing is hiding in a folder you have to go find.

Where it puts things

One new folder in your home directory. That is the entire footprint. It does not touch your existing projects, your desktop, your photos or your footage, and it does not install anything system-wide without asking you separately.

Nothing is downloaded while it runs. Every file it writes is already inside the file you downloaded. Nothing you have is sent anywhere.

What it does without stopping to ask

Runs freely, inside your studio folder

This is the work. Being asked to approve each one is what makes the tool feel broken, so these are approved once, here, in advance.

Read any file in the studio folder
List and find files by name
Search inside files for text
Create new files
Change files it has already created
Check which files changed
Show what changed inside a file
Read the history of your own edits
Open an older version of a file
Stage a change, ready to be saved
List what is in a folder
Look for a file somewhere in the folder
Print a file so it can read it
Read the first lines of a file
Read the last lines of a file
Make a new folder
Copy a file
Check a script for syntax errors, without running it
Check a shell script for syntax errors, without running it

What always stops and asks you

Asks first, every time

Anything that leaves your machine, rewrites history, or destroys something. These stay a question no matter how many times you say yes, and no setting in the studio turns them off.

Upload your work to GitHub
Save a version of your work
Delete a file
Move or rename a file
Fetch something from the internet
Act on your GitHub account
Open a web page and read it

What it cannot do at all

Blocked in code, not by good intentions

These are guards that sit between Claude and your machine and refuse the command outright. They are not instructions it has been asked to follow. They fire whatever posture you are on.

No recursive delete, and no delete outside the studio folder
No writing a password, key or token into a file that gets saved
No touching your original camera media, ever, in any way
No uninstall that actually removes anything: it renames, so you can undo it

What leaves your machine

During the setup: nothing. Afterwards, the only thing that goes out is your conversation with Claude, to Anthropic, the same as any other Claude session. Your files go out only when you ask for something that sends them, and that is on the asks-first list above.

Changing your mind later

Three postures ship with the studio: careful asks about more, balanced is what you get here, fast asks about less. Say “change my posture to careful” in the chat, or run _SYSTEM/scripts/set_posture.sh. The guards in the third box do not move when you do that. The posture changes how often you are asked. It never changes whether the seatbelt is fastened.

And if you want it all gone: the uninstaller renames the folder and stops. Nothing you made is deleted.

Got it, take me back to the download

The Program · this page is generated from the permission file that actually ships, so it cannot describe a setup you are not getting.