chs: re-add drifted files

dot_claude/settings.json

@@ -235,7 +235,8 @@
     "solidity-language-server@claude-code-lsps": true,
     "understand-anything@understand-anything": true,
     "vtsls@claude-code-lsps": true,
-    "yaml-lsp@zircote-lsp": true
+    "yaml-lsp@zircote-lsp": true,
+    "diagram-design@diagram-design": true
   },
   "extraKnownMarketplaces": {
     "caveman": {
@@ -297,10 +298,44 @@
         "source": "github",
         "repo": "zircote/lsp-marketplace"
       }
+    },
+    "diagram-design": {
+      "source": {
+        "source": "github",
+        "repo": "cathrynlavery/diagram-design"
+      }
     }
   },
   "tui": "fullscreen",
   "skipDangerousModePermissionPrompt": true,
   "agentPushNotifEnabled": true,
-  "skipAutoPermissionPrompt": true
+  "skipAutoPermissionPrompt": true,
+  "autoMode": {
+    "environment": [
+      "### Org-wide",
+      "**Organization**: None configured",
+      "**Cloud provider(s)**: None configured",
+      "**Repository visibility**: Private — prdlk/leetcode (github.com)",
+      "**Internal sharing / snippet hosting**: None configured — treat public paste/gist services as outside the trust boundary",
+      "**Secrets management**: None configured",
+      "**Default / protected branches**: Default branch `main`; no protected branches listed (rulesets not queryable here)",
+      "**CI/CD deploy targets**: None configured",
+      "**Network posture**: None configured",
+      "**Source control**: The trusted repo (prdlk/leetcode on github.com) and its remote(s) only — no additional orgs configured",
+      "**Trusted internal domains**: None configured",
+      "**Trusted cloud buckets**: None configured",
+      "**Key internal services**: None configured",
+      "**Internal package registry**: None configured",
+      "**Sensitive data locations & audiences**: any file or store holding personal data, confidential business data, credentials, regulated data, or similarly sensitive material; preserve exact handles when known and share only with audiences cleared at the [named+specifics] bar. Note: `.env*` patterns are gitignored in this repo (`.env`, `.env.local`, `.env.development.local`, `.env.test.local`, `.env.production.local`) — treat matching files as sensitive.",
+      "**Data retention / declassification**: None configured",
+      "**Sensitive remote targets**: any namespace, host, or container whose name carries `prod` or `production` as a whole word or name segment (hyphen/underscore/dot-delimited — e.g. matches `prod-db`, not `producer`)",
+      "**Protected deployment namespaces / environments**: None configured — fall back to the Sensitive remote targets heuristic",
+      "**Protected IaC scopes**: IAM, RBAC, networking, quota, and node-pool resources; anything whose name or tag carries `prod` or `production` as a whole word or name segment",
+      "### User-specific",
+      "**Primary use of Claude Code**: software development (personal — Leetcode solutions/notes repo)",
+      "**Trusted repo**: prdlk/leetcode (github.com), private — the working directory the agent started in and its configured remote `origin`. As a private repo, confidential material may be committed here, but secrets/credentials are never cleared into it by visibility alone.",
+      "**Org-specific CLIs**: None configured",
+      "routine actions under `prdlk/leetcode` (this repo) treated as low-risk personal-project work"
+    ]
+  }
 }