~/.claude config repo: deny-by-default .gitignore + secret pre-commit
Keeps James's AI configuration under version control without ever committing transcripts or passwords.
built Sep 2026
Upgrading the AI's workbench
how it works
Allowlist .gitignore ('*' then re-include skills/agents/hooks...) so new runtime dirs are excluded by default; versioned pre-commit hook blocks forbidden paths and scans the staged diff for secret patterns (core.hooksPath).
Automation: Something that runs on a schedule by itself.