diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..3e9870d
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,12 @@
+{
+  "permissions": {
+    "allow": [
+      "WebFetch",
+      "WebSearch"
+    ]
+  },
+  "sandbox": {
+    "autoAllowBashIfSandboxed": true,
+    "enabled": true
+  }
+}
diff --git a/README.md b/README.md
index 2e3defb..ca5773a 100644
--- a/README.md
+++ b/README.md
@@ -91,6 +91,10 @@ ninja # builds figures and the paper
 git commit # checks format, lints, and type checks
 ```
 
+### Claude Code
+
+Default project settings in `.claude/settings.json` allow all bash commands sandboxed to the working directory and all network requests (`WebFetch`, `WebSearch`). This is a good balance between security and velocity. Override these in `.claude/settings.local.json` if you like.
+
 ### Files to know
 
 - `flake.nix` defines system dependencies like `texlive`