Claude Code Mods Are In-Process Code: Keep an Extension Manifest for Every Machine
Claude Code mods run in-process, can approve tool calls and aren't sandboxed. Keep a manifest per machine, pick a managed-settings policy, pin and roll back.
Read the story