Skip to main content
For most teams, safety comes from clear runtime defaults and review discipline.

​
Core controls

  • Container & Network settings
  • Worktree isolation
  • Diff review before finalization
  • Use containerized workspaces where consistency matters.
  • Default network policy to least privilege.
  • Keep allowlists explicit and minimal.

​
Worktree bootstrap as safety tooling

Use Worktree Bootstrap to enforce repeatable setup commands for every new worktree so session behavior is consistent.

​
Review safety rule

Even with strict settings, do not skip diff review.