Anthropic: Claude Code uses regex allowlisting and default read permissions
Kat Wu · Claude Code: Anthropic's CLI Agent · May 7, 2025 · at 26:05
Kat Wu and Boris Cherny of Anthropic discuss the safety and permission boundaries built into Claude Code, Anthropic's agentic CLI coding tool.
0:00 / 0:34exact quote · 34.2s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“We're spending a lot of time building out the permission system, so Robert on our team is leading out this work. We think it's really important to give developers the control to say, hey, these are like the allowed permissions. Generally, this includes stuff like the model's always allowed to read files or read anything, and then it's up to the user to say, hey, is it about to edit files? Is it about to run tests? These are like probably the safest three actions, and then there's like a long list of other actions that Users can either allow list or deny list based on regex matches with the action.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Kat Wu
Anthropic observes Claude Code API costs averaging roughly $6 daily per user
“Currently we're seeing costs around, like, six dollars per day per active user, and so it's, like, it does come out to a bit higher over the course of a month in Cursor but I don't think it's, like, out of band, and that's, like, roughly how we're thinking abo…”
Anthropic's non-coding product designer ships monorepo pull requests using Claude Code
“And she's landing PRs to our console product. So it's not even just, like, building on quad code. It's building, like, across our product suite in our monorepo.”
Wu: Internal operational tools are a major use case for Claude Code
“You mentioned internal tools, and that's actually a really big use case that we're seeing emerge, because a lot of times if you're working on something operationally intensive, if you can spin up a internal dashboard for it, or like an operational tool where y…”
Wu: Claude 3.7 Sonnet is highly persistent but interprets tasks too literally
“The latest Sonnet three seven is, it's a very persistent model. It's like very, very motivated to accomplish the user's goal, but it sometimes takes the user's goal very literally, and so it doesn't always fulfill what, like, the implied parts of the request a…”
Anthropic: Cycle time and backlog unlocking are key productivity metrics
“The two that we're really trying to nail down are, one, decrease in cycle time. So how much faster are your features shipping because you're using these tools? So that might be something like the time between first commit and when your PR is merged. It's very …”
Anthropic: Most of Research Team Uses Claude Code Daily
“Most of our research team actually uses quad code day to day, and so it's been a great way for them to be very hands-on and, like, experience the model failures, which makes it a lot easier for us to target these in model training and to actually provide bette…”