You'll finish with: You know which of your rules are actually holding.
Every rule you've written so far is a request. Anthropic's own documentation is blunt about it: these files are context, not enforced configuration. Claude reads them and tries to comply. There's no guarantee.
A request versus a rule
Ask of each rule: if this failed silently, what would it cost me?
A hook is a tiny script that runs automatically the moment Claude tries to do something. It answers one question — allow this, or stop it — before the action happens.
You want signs for most things and locks for four. Locking everything makes the setup unusable. Locking nothing makes it a liability.
You have a short written list of what needs a lock rather than a sign — and it's short.