Security requires that Claude Code never read files under a repository's secrets/ directory. The rule is currently written in the project CLAUDE.md, yet a developer's session read one of those files. What is the most appropriate fix?

Answer: B — Add deny rules for those paths in managed settings so no project or user configuration can loosen them

A must-hold rule needs enforcement, not guidance; deny rules in managed settings take precedence and cannot be overridden (b). (a) and (c) are still instructions the model may not follow, and (c) relies on each person. (d) detects violations after the secret is already exposed.