diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..ba40565
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,46 @@
+{
+  "permissions": {
+    "allow": [
+      "WebFetch(domain:docs.rs)",
+      "WebFetch(domain:agentclientprotocol.com)",
+      "mcp__acp__Bash",
+      "mcp__acp__Edit",
+      "mcp__acp__Write",
+      "mcp__acp__Task",
+      "mcp__acp__Grep",
+      "mcp__acp__Read",
+      "Bash(find:*)",
+      "Bash(xargs:*)",
+      "Bash(awk:*)",
+      "Bash(just:*)",
+      "Bash(mkdir:*)",
+      "Bash(grep:*)",
+      "Bash(sed:*)",
+      "Bash(rg:*)",
+      "Bash(uv:*)",
+      "Bash(uvx:*)",
+      "Bash(cat:*)",
+      "Bash(cargo check:*)",
+      "Bash(cargo build:*)",
+      "Bash(cargo test:*)",
+      "Bash(cargo doc:*)",
+      "Bash(test:*)",
+      "Bash(rustc:*)",
+      "Bash(git checkout:*)",
+      "Bash(git commit:*)",
+      "Bash(git add:*)",
+      "Bash(git fetch:*)",
+      "Bash(git diff:*)",
+      "Bash(git revert:*)",
+      "Bash(git stash:*)",
+      "Bash(git status:*)",
+      "Bash(dx build:*)",
+      "Bash(dx check:*)",
+      "Bash(Select-String:*)"
+    ],
+    "deny": ["Read(.env*)", "Bash(cat .env:*)", "Bash(gh:*)", "Bash(ssh:*)"],
+    "ask": ["Bash(rm:*)", "Bash(mv:*)", "Bash(git push:*)"]
+  },
+  "model": "claude-opus-4-6[1m]",
+  "effortLevel": "medium"
+}