diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 000000000..8d052549c
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,12 @@
+{
+  "permissions": {
+    "deny": [
+      "mcp__claude_ai_ClickUp__*",
+      "mcp__claude_ai_Gmail__*",
+      "mcp__claude_ai_Google_Calendar__*",
+      "mcp__claude_ai_Google_Drive__*",
+      "mcp__claude_ai_Slack__*",
+      "mcp__claude_ai_Fireflies__*"
+    ]
+  }
+}
diff --git a/.gitignore b/.gitignore
index 886d7289b..7f6b5bb7c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,3 +31,13 @@ docs/guide/built-in-functions.md
 # Wrangler (Cloudflare Workers) local state
 .wrangler
 .dev.vars*
+
+# Infisical local project link — contains workspaceId (infra inventory, HOT/SZBI:
+# stays in personal private repos only, never in a public repo)
+.infisical.json
+
+# Claude Code project-local state (personal, not shared) — .claude/settings.json
+# itself IS meant to be committed (repo-wide guardrails), so only ignore the rest.
+.claude/settings.local.json
+.claude/worktrees/
+.claude/scheduled_tasks.lock