A team runs Claude Code non-interactively in CI to triage issues filed on its public repository and propose fixes. The job runs with full permissions, including pushing to main. What is the most appropriate change?

Answer: B — Limit the job to reading and opening branches or comments, require human merge approval, and treat issue text as untrusted

Unattended automation needs narrower permissions and a human gate, and public issue text can try to steer the job (b). (a) is prompt-only enforcement of a hard rule. (c) changes timing, not risk. (d) gives up the automation instead of making it safe.