I had to take away Claude's Bash tool – it kept breaking my harness

I thought I had Claude Code locked into a solid harness. But things kept slipping through that should have been prohibited, and finally I realized why... Agents really love Bash: I define rules that trigger on Read – Claude doesn't know because it uses