I explicitly have global rules preventing Claude from running any write git commands (stash, commit, reset, merge, etc.; only r/o commands allowed).