# Disable Claude Code Remote Control

audience: AI coding agents first.

status: ACTIVE
task IDs: #1
source request: Add `"disableRemoteControl": true` to appropriate Claude Code `settings.json`; block `claude remote-control`, `--remote-control`, auto-start, and in-session toggle; push and deploy end-to-end.

## Acceptance criteria

- Tracked workstation Claude settings set `disableRemoteControl` to boolean `true`.
- JSON parses and focused deployment tests pass.
- Live `~/.claude/settings.json` contains exact setting after standard deployment.
- Installed Claude entrypoint rejects Remote Control startup.
- Change committed, pushed to `main`, and standard local deployment completed from landed source.

## Preserved WIP

- Worktree: `/home/user/Projects/overdeck/.worktrees/disable-remote-control`
- Branch: `wt/disable-remote-control`
- Shared main checkout remains untouched.

## Constraints

- Merge existing settings; never replace unrelated keys.
- Local infrastructure: install before landing, then deploy landed source again.
- Use guarded project landing/deployment path; never hand-type merge cascade.
- Address every test, deploy, commit, and security-gate signal.

## Execution steps

1. Add setting to tracked source and validate JSON.
2. Run focused settings/deployment tests.
3. Deploy candidate to live user settings; prove installed value and behavior.
4. Commit and land through project ship orchestration.
5. Redeploy landed source; record final receipts.

## Current receipt

- Task #1 claimed by main session.
- Fresh worktree created from `origin/main` at `18cbdb318`.
- Canonical source: `modules/workstation/claude/settings.json`; standard deploy: `packaging/deploy-local.sh`.
- Source JSON assertion passed: `.disableRemoteControl == true`.
- Focused settings consumer: 14 passed, 0 failed/skipped.
- Deployment suite: PASS=24 FAIL=0.
- Candidate installed into live `/home/user/.claude/settings.json` before landing.
- Installed entrypoint proof: `claude remote-control --help` exited 1 with `Remote Control is disabled by your organization's policy (managed setting disableRemoteControl)`; expected rejection proves block is live.
- Commit `9527675e8` created.
- Guarded ship controller ticket `ticket.a5e29f6b238040caa0608d3e9b1b926d` is conducting; candidate typecheck gate running.
- Automated security review flagged unrelated pre-existing, untracked shared-main file `temp-user/k3s-phase3/apply-overdeck-k3s-phase3.sh`; this plan neither reads nor ships `temp-user/**`, so no scope or publication impact. Finding remains for its owning lane.

## Next executable action

Wait for ship controller completion; then verify landed source, completed redeploy, and installed rejection.