I’m considering using Claude Code on a work repository, but I’d like to understand how much control I have over commands it runs. Does it normally ask for approval before executing shell commands, and can that behavior be limited to certain kinds of commands?

I’m not looking for a way to disable safeguards—I want a setup where routine read-only tasks are convenient, while anything that changes files or affects the environment gets a clear confirmation.