Safety-Posture Decision

Description

One of six recurring design decisions. Options: deny-first layered enforcement (Claude Code, 7 layers), container isolation (SWE-Agent/OpenHands), VCS rollback (Aider), or approval-only. Key guide insight: defense-in-depth only works if layers have INDEPENDENT failure modes; Claude Code's layers share an economic constraint (commands >50 subcommands bypass security analysis entirely).

Key claims

Relations

Sources

src-20260423-fd74bb3399e6