diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..e0b139f
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,23 @@
+{
+  "attribution": {
+    "commit": "",
+    "pr": ""
+  },
+  "permissions": {
+    "allow": [
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(git push:*)",
+      "Bash(git pull:*)",
+      "Bash(git status:*)",
+      "Bash(git diff:*)",
+      "Bash(git log:*)"
+    ],
+    "deny": [
+      "mcp__github__create_or_update_file",
+      "mcp__github__push_files",
+      "mcp__github__create_or_update_files",
+      "mcp__github__delete_file"
+    ]
+  }
+}
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 0000000..3d10c5e
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,11 @@
+## Git Rules — STRICT
+- ALWAYS use native git for ALL commits and pushes
+- NEVER use mcp__github__ tools for committing or pushing
+- Use mcp__github__ ONLY for: PRs, Issues, GitHub Actions
+- Write commit messages to a temp file, then: `git commit -F <file>`
+- NEVER use --no-gpg-sign flag
+
+# Cycles strict rules
+- yaml API specs always the authority
+- always udated AUDIT.md files when making changes to server, admin, client repos
+- maintain at least 95% or higher test coverage for all code repos