this is basically the only way I work with Claude now. takes too long to approve every tool use. we use git + protected branch workflows. I'm considering moving to containers w/network firewalls to feel a bit better about it.